RE: password chicken/egg

[JD...@genelogic.com]

> When i change passwords in the FluxUserForm it stores
> the un-encrypted value into the database!
> I cant?t find any hint in the mailing list except the chicken and egg
> problem.

Make omelletes. Mmmm. I wrote a screen that passed a string to a duplicated
method from the TurbineSecurity classes to do the encryption. The  string
'test' encrypted ends up as:

qUqP5cyxm6YcTAhz05Hph5gv

so,

1) Down your container

2) Update your account pw in the db to the above string, or, alternatively,
update all entries in your turbine-security.xml to init to this password
and rebuild your db.

3) Update your TR.properties file to secure.passwords=true

4) Up the container, login using 'test', then change your password (you did
write a change pw screen, right? :P)

Note that this won't work if, unfortunately, you have an existing system w/
existing user accounts but I gather from your comments below re: plaintext
pw's that this isn't the case.

HTH,
-j

-------------------------------------------------
James Diggans
Bioinformatics Programmer
Gene Logic, Inc.
Phone: 301.987.1756
FAX: 301.987.1701




--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>