You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by Erick Erickson <er...@gmail.com> on 2017/08/23 02:07:10 UTC
Re: [jira] [Created] (SOLR-11279) It is necessary to specify how to
generate a password when used Basic Authentication!
The files that make up the new reference guide are in AsciiDoc format
and are part of the standard checkout of the source, see
https://wiki.apache.org/solr/HowToContribute for getting the source
and https://builds.apache.org/view/L/view/Lucene/job/Solr-reference-guide-master/javadoc/how-to-contribute.html#link-to-other-pages-sections-of-the-guide
for editing HowTo
Anyone can edit the reference guide docs and create a patch, please
feel free to amend the documentation as you'd like and submit a patch.
Best,
Erick
On Tue, Aug 22, 2017 at 7:55 PM, chenmin (JIRA) <ji...@apache.org> wrote:
> chenmin created SOLR-11279:
> ------------------------------
>
> Summary: It is necessary to specify how to generate a password when used Basic Authentication!
> Key: SOLR-11279
> URL: https://issues.apache.org/jira/browse/SOLR-11279
> Project: Solr
> Issue Type: Improvement
> Security Level: Public (Default Security Level. Issues are Public)
> Affects Versions: 5.3.1
> Reporter: chenmin
>
>
>
> Follow the documentation ,"Usernames and passwords (as a sha256(password+salt) hash) could be added when the file is created.
>
> Actually, I do not know how to generate a password.
> Finding code as:
>
> public static String getSaltedHashedValue(String pwd) {
> final Random r = new SecureRandom();
> byte[] salt = new byte[32];
> r.nextBytes(salt);
> String saltBase64 = Base64.encodeBase64String(salt);
> String val = sha256(pwd, saltBase64) + " " + saltBase64;
> return val;
> }
>
> I think we shoud give an example to generate password in ref guide!
>
>
>
> --
> This message was sent by Atlassian JIRA
> (v6.4.14#64029)
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
> For additional commands, e-mail: dev-help@lucene.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org