[jboss-jira] [JBoss JIRA] (ELY-1497) Support Modular Crypt Format (MCF) password in Bcrypt mapper
Martin Choma (JIRA)
issues at jboss.org
Thu Jan 25 04:22:00 EST 2018
[ https://issues.jboss.org/browse/ELY-1497?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Martin Choma updated ELY-1497:
------------------------------
Description:
Currently BCrypt mapper for DB realm does not support MCF format passwords (which does not require explicit salt or iterations):
{noformat}
17:42:28,328 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 3) WFLYCTL0013: Operation ("add") failed - address: ([
("subsystem" => "elytron"),
("jdbc-realm" => "DatabaseRealm")
]) - failure description: "WFLYCTL0155: 'salt-index' may not be null"
{noformat}
Support should be added to support MCF password so only single column needed in DB.
Logic:
{code}
if (password && !salt && !iterations)
assume MCF format password
else if (password && salt && iterations)
assume BCrypt (b64) password, etc
else
error
{code}
was:
Currently BCrypt mapper for DB realm does not support MCF format passwords (which does not require explicit salt or iterations):
17:42:28,328 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 3) WFLYCTL0013: Operation ("add") failed - address: ([
("subsystem" => "elytron"),
("jdbc-realm" => "DatabaseRealm")
]) - failure description: "WFLYCTL0155: 'salt-index' may not be null"
Support should be added to support MCF password so only single column needed in DB.
Logic:
if (password && !salt && !iterations)
assume MCF format password
else if (password && salt && iterations)
assume BCrypt (b64) password, etc
else
error
> Support Modular Crypt Format (MCF) password in Bcrypt mapper
> ------------------------------------------------------------
>
> Key: ELY-1497
> URL: https://issues.jboss.org/browse/ELY-1497
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: Passwords
> Affects Versions: 1.1.7.Final
> Reporter: Tom Stiemerling
>
> Currently BCrypt mapper for DB realm does not support MCF format passwords (which does not require explicit salt or iterations):
> {noformat}
> 17:42:28,328 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 3) WFLYCTL0013: Operation ("add") failed - address: ([
> ("subsystem" => "elytron"),
> ("jdbc-realm" => "DatabaseRealm")
> ]) - failure description: "WFLYCTL0155: 'salt-index' may not be null"
> {noformat}
> Support should be added to support MCF password so only single column needed in DB.
> Logic:
> {code}
> if (password && !salt && !iterations)
> assume MCF format password
> else if (password && salt && iterations)
> assume BCrypt (b64) password, etc
> else
> error
> {code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
More information about the jboss-jira
mailing list