[jboss-jira] [JBoss JIRA] (WFCORE-2186) Salted password cannot be set through CLI for Elytron filesystem-realm identity
Michal Petrov (JIRA)
issues at jboss.org
Thu Jan 12 06:07:00 EST 2017
[ https://issues.jboss.org/browse/WFCORE-2186?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13347012#comment-13347012 ]
Michal Petrov commented on WFCORE-2186:
---------------------------------------
Object notation works, i.e.
{code}
/subsystem=elytron/filesystem-realm=fsrealm/identity=admin:set-password(bcrypt={"iteration-count"=>42,"password"=>"passwrod1","salt"=>bytes{0x31,0x32,0x33}})
{code}
But given that the shorter format works for other things I assume it should work for this as well.
Note: the above command will fail to create a password, the iteration-count must be between 4 and 31 and salt must 16 bytes long, this one will work:
{code}
/subsystem=elytron/filesystem-realm=fsrealm/identity=admin:set-password(bcrypt={"iteration-count"=>12,"password"=>"passwrod1","salt"=>bytes{0x31,0x32,0x33,0x32,0x31,0x32,0x33,0x32,0x31,0x32,0x33,0x32,0x31,0x32,0x33,0x32}})
{code}
> Salted password cannot be set through CLI for Elytron filesystem-realm identity
> -------------------------------------------------------------------------------
>
> Key: WFCORE-2186
> URL: https://issues.jboss.org/browse/WFCORE-2186
> Project: WildFly Core
> Issue Type: Bug
> Components: CLI
> Affects Versions: 3.0.0.Alpha16
> Reporter: Ondrej Lukas
> Assignee: Michal Petrov
>
> Password encryption/hash mechanisms which contain {{salt}} attribute for filesystem-realm identity cannot be added through CLI. {{set-password}} operation fails and finishes with failure-description "WFLYCTL0155: password may not be null" even if password was set. It seems when {{salt}} attribute with {{bytes}} value is used then {{password}} attribute is ignored by CLI.
> Following password encryption/hash mechanisms from filesystem-realm identity are affected by issue:
> - {{bcrypt}}
> - {{salted-simple-digest}}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list