[jboss-jira] [JBoss JIRA] (WFLY-7583) Salted password cannot be set through CLI for Elytron filesystem-realm identity

Michal Petrov (JIRA) issues at jboss.org
Wed Jan 11 10:53:00 EST 2017


    [ https://issues.jboss.org/browse/WFLY-7583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13346637#comment-13346637 ] 

Michal Petrov commented on WFLY-7583:
-------------------------------------

The problem is in CLI, the command is not parsed properly:
{{\{iteration-count=42,password=passwrod1,salt=bytes\{0x31,0x32,0x33\}\}}} is parsed as
{code}
[
  {
    iteration-count=42,
    password=passwrod1,
    salt=bytes{0x31
  },
  0x32,
  0x33
]
{code}

> Salted password cannot be set through CLI for Elytron filesystem-realm identity
> -------------------------------------------------------------------------------
>
>                 Key: WFLY-7583
>                 URL: https://issues.jboss.org/browse/WFLY-7583
>             Project: WildFly
>          Issue Type: Bug
>          Components: CLI, Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Ondrej Lukas
>            Assignee: Michal Petrov
>
> Password encryption/hash mechanisms which contain {{salt}} attribute for filesystem-realm identity cannot be added through CLI. {{set-password}} operation fails and finishes with failure-description "WFLYCTL0155: password may not be null" even if password was set. It seems when {{salt}} attribute with {{bytes}} value is used then {{password}} attribute is ignored by CLI.
> Following password encryption/hash mechanisms from filesystem-realm identity are affected by issue:
> - {{bcrypt}}
> - {{salted-simple-digest}}



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list