[teiid-issues] [JBoss JIRA] (TEIID-1799) teiid fails to work when the datasource han an encrypted password created with PBEUtils

[Ramesh Reddy (Commented) (JIRA)]

    [ https://issues.jboss.org/browse/TEIID-1799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12639876#comment-12639876 ] 

Ramesh Reddy commented on TEIID-1799:
-------------------------------------

I tested with single source that is using the encrypted password, it worked as expected. The only change I had to to place application policy in the login-config.xml file, rather than teiid-jboss-beans.xml file.

1) I tested  DS alone with out plain text password
2) Tested DS alone with encrypted password
3) then deployed VDB, which uses the above DS, then queries using SquirreL and got results.
4) I also verfied that using the wrong encrypted or not having login context does fail.

The -ds.xml file looks like

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<datasources>
    <local-tx-datasource>
        <jndi-name>Txns</jndi-name>
        <driver-class>com.mysql.jdbc.Driver</driver-class>
        <connection-url>jdbc:mysql://localhost:3306/txns</connection-url>
		<security-domain>EncryptedPostgresRealm</security-domain>
    </local-tx-datasource>
  <mbean code="org.jboss.security.plugins.JaasSecurityDomain"  name="jboss.security:service=JaasSecurityDomain,domain=ServerMasterPassword">
      <constructor>
        <arg type="java.lang.String" value="ServerMasterPassword"/>
      </constructor>
      <attribute name="KeyStorePass">{CLASS}org.jboss.security.plugins.FilePassword:${jboss.server.home.dir}/conf/server.password</attribute>
      <attribute name="Salt">passwd12</attribute>
      <attribute name="IterationCount">13</attribute>
  </mbean>
</datasources>

and application policy in login-config.xml in the "conf" looks like

    <application-policy name = "EncryptedPostgresRealm">
       <authentication>
          <login-module code = "org.jboss.resource.security.JaasSecurityDomainIdentityLoginModule" flag = "required">
             <module-option name = "username">rareddy</module-option>
             <module-option name = "password">5wQn7o7KJm0</module-option>
             <module-option name = "managedConnectionFactoryName">jboss.jca:service=LocalTxCM,name=Txns</module-option>
             <module-option name = "jaasSecurityDomain">jboss.security:service=JaasSecurityDomain,domain=ServerMasterPassword</module-option>
          </login-module>
       </authentication>
    </application-policy>

                
> teiid fails to work when the datasource han an encrypted password created with PBEUtils
> ---------------------------------------------------------------------------------------
>
>                 Key: TEIID-1799
>                 URL: https://issues.jboss.org/browse/TEIID-1799
>             Project: Teiid
>          Issue Type: Bug
>          Components: JDBC Connector
>    Affects Versions: 7.1.1
>            Reporter: Tom Fonteyne
>
> Encrypt the datasource password with procedure in
> https://access.redhat.com/kb/docs/DOC-19884
> the teiid VDB will throw "Unauthenticated caller"
> product jira: https://issues.jboss.org/browse/SOA-3534

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira