Re: Password algorithm

--Apple-Mail=_788E4750-3BE3-45F1-9791-7B0F576087B4
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


> On Jun 23, 2016, at 5:34 AM, Nikola Djakovic <[email protected]> =
wrote:
>=20
> Hi,
>=20
> I would like to redirect my new application to user username/password =
in jetspeed portal.
> I can not find algorithm that Jetspeed use.
> In webapps/jetspeed/WEB-INF/assembly, i found security-spi.xml and =
line:
>=20
> /<bean id=3D"org.apache.jetspeed.security.CredentialPasswordEncoder"//
> =
//class=3D"org.apache.jetspeed.security.spi.impl.MessageDigestCredentialPa=
sswordEncoder">//
> //    <meta key=3D"j2:cat" value=3D"default or security" />//
> //    <constructor-arg index=3D"0">//
> //      <value>SHA-1</value>//
> //    </constructor-arg>//
> //  </bean>/
>=20

Not sure what those comments // are doing in your XML, but it will break =
it

> But when I generate password with SHA-1 it does not match as in =
jetspeed database
>=20

The Message digests are secure one-way hash functions. We use SHA-1 out =
of the box.  You can find the algorithm in the implementation class =
listed above:

=
http://grepcode.com/file/repo1.maven.org/maven2/org.apache.portals.jetspee=
d-2/jetspeed-security/2.3.0/org/apache/jetspeed/security/spi/impl/MessageD=
igestCredentialPasswordEncoder.java =
<http://grepcode.com/file/repo1.maven.org/maven2/org.apache.portals.jetspe=
ed-2/jetspeed-security/2.3.0/org/apache/jetspeed/security/spi/impl/Message=
DigestCredentialPasswordEncoder.java>





--Apple-Mail=_788E4750-3BE3-45F1-9791-7B0F576087B4--