You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@syncope.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2016/10/03 10:51:20 UTC

[jira] [Commented] (SYNCOPE-946) Encrypted attribute values not managed as password values

    [ https://issues.apache.org/jira/browse/SYNCOPE-946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15542124#comment-15542124 ] 

ASF subversion and git services commented on SYNCOPE-946:
---------------------------------------------------------

Commit 720794a6cea78fadb384db079239036c5e8a9422 in syncope's branch refs/heads/2_0_X from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=720794a ]

[SYNCOPE-946] Same fix for enduser


> Encrypted attribute values not managed as password values
> ---------------------------------------------------------
>
>                 Key: SYNCOPE-946
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-946
>             Project: Syncope
>          Issue Type: Bug
>          Components: console, enduser
>    Affects Versions: 2.0.0
>            Reporter: Francesco Chicchiriccò
>            Assignee: Francesco Chicchiriccò
>             Fix For: 2.0.1, 2.1.0
>
>
> When editing an user / group / any object with an encrypted attribute, the value is treated as plain text.
> How to reproduce:
>  # create an Encrypted schema {{sharedPassword}}
>  # create an user, and set the {{secret}} value for {{sharedPassword}}
>  # edit such user from the admin console: the value for {{sharedPassword}} will be the encrypted string
> As a result, when clicking on Finish, the encrypted value will be sent again to the core, which will then encrypt it again.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)