You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Chris Custine (JIRA)" <di...@incubator.apache.org> on 2007/04/15 22:05:15 UTC

[jira] Updated: (DIR-210) Cached credentials checking doesn't work with Hashed passwords

     [ https://issues.apache.org/jira/browse/DIR-210?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chris Custine updated DIR-210:
------------------------------

    Attachment: DIR-210.diff

This patch fixes this issue by refactoring hashed password checking to a new method and adds a call to it as a fall through if the check against the credentials cache doesn't match.  

> Cached credentials checking doesn't work with Hashed passwords
> --------------------------------------------------------------
>
>                 Key: DIR-210
>                 URL: https://issues.apache.org/jira/browse/DIR-210
>             Project: Directory
>          Issue Type: Bug
>            Reporter: Chris Custine
>         Assigned To: Alex Karasulu
>         Attachments: DIR-210.diff
>
>
> Checking passwords against the credentials cache doesn't take into account Hashed passwords.  The easiest solutions are to refactor the hashed password code from first time authentication attempts and re-use it for checking against the credentials cache or store the digested credentials in the cache.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.