You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cocoon.apache.org by Sternath Elmar <el...@siemens.com> on 2003/01/17 11:25:37 UTC
How to encrypt password in DatabaseAuthenticatorAction??
Hello,
I use DatabaseAuthenticatorAction and Update/AddDatabaseAction for my login/user administration procedure. All user info including password is stored as clear text in the database. Is there any solution for password encryption in this context?
Mit freundlichen Grüßen/ Best regards
Elmar Sternath
Siemens AG
Information and Communication Networks
ICN IT CA EB 2 - Web Applications
Mch H/Me19 - 99801-231a
Meglinger Straße 19 (99801-231a) D-84577 München
Tel.: +49(89)722-24045
Mobil: +49(0)160-5860351
Fax.: +49(89)722-53384
EMail: Elmar.Sternath@siemens.com
<<Sternath Elmar.vcf>>
Re: How to encrypt password in DatabaseAuthenticatorAction??
Posted by Murad Jura <mu...@asbt.uz>.
Hello,
In my point of view the easiest way is to not store real pusswords but
its digests (in example MD5 or SHA).
Murad Jura.
Sternath Elmar wrote:
> Hello,
>
> I use DatabaseAuthenticatorAction and Update/AddDatabaseAction for my login/user administration procedure. All user info including password is stored as clear text in the database. Is there any solution for password encryption in this context?
>
>
> Mit freundlichen Grüßen/ Best regards
> Elmar Sternath
>
> Siemens AG
> Information and Communication Networks
> ICN IT CA EB 2 - Web Applications
> Mch H/Me19 - 99801-231a
>
> Meglinger Straße 19 (99801-231a) D-84577 München
> Tel.: +49(89)722-24045
> Mobil: +49(0)160-5860351
> Fax.: +49(89)722-53384
> EMail: Elmar.Sternath@siemens.com
>
> <<Sternath Elmar.vcf>>
>
>
> ------------------------------------------------------------------------
>
> ---------------------------------------------------------------------
> Please check that your question has not already been answered in the
> FAQ before posting. <http://xml.apache.org/cocoon/faq/index.html>
>
> To unsubscribe, e-mail: <co...@xml.apache.org>
> For additional commands, e-mail: <co...@xml.apache.org>
---------------------------------------------------------------------
Please check that your question has not already been answered in the
FAQ before posting. <http://xml.apache.org/cocoon/faq/index.html>
To unsubscribe, e-mail: <co...@xml.apache.org>
For additional commands, e-mail: <co...@xml.apache.org>
Re: How to encrypt password in DatabaseAuthenticatorAction??
Posted by "Marcelo F. Ochoa" <mo...@ieee.org>.
Sternath Elmar wrote:
>Hello,
>
>I use DatabaseAuthenticatorAction and Update/AddDatabaseAction for my login/user administration procedure. All user info including password is stored as clear text in the database. Is there any solution for password encryption in this context?
>
If you are using Oracle, you could use the database package
DBMS_OBFUSCATION_TOOLKIT
(http://otn.oracle.com/docs/products/oracle9i/doc_library/release2/appdev.920/a96612/d_obtool.htm#6518).
It can encryt/decryt password with the same algorithm as the database.
>
>
>Mit freundlichen Grüßen/ Best regards
>Elmar Sternath
>
>
>
Best regards, Marcelo.
--
Marcelo F. Ochoa - mochoa@ieee.org
Do you Know DB Prism? Look @ http://www.dbprism.com.ar/dbprism/doc/Home.html
More info?
Chapter 21 of the book "Professional XML Databases" (Wrox Press
http://www.wrox.com/)
Chapter 8 of the book "Oracle & Open Source" (O'Reilly
http://www.oreilly.com/catalog/oracleopen/)
-----------------------------------------------
Lab. de Sistemas - Fac. de Cs. Exactas - UNICEN
Paraje Arroyo Seco - Campus Universitario
(7000) Tandil - Bs. AS. - Argentina
Te: +54-2293-444430 Fax: +54-2293-444431
---------------------------------------------------------------------
Please check that your question has not already been answered in the
FAQ before posting. <http://xml.apache.org/cocoon/faq/index.html>
To unsubscribe, e-mail: <co...@xml.apache.org>
For additional commands, e-mail: <co...@xml.apache.org>
Re: How to encrypt password in DatabaseAuthenticatorAction??
Posted by Christian Haul <ha...@dvs1.informatik.tu-darmstadt.de>.
On 17.Jan.2003 -- 11:25 AM, Sternath Elmar wrote:
> Hello,
>
> I use DatabaseAuthenticatorAction and Update/AddDatabaseAction for
> my login/user administration procedure. All user info including
> password is stored as clear text in the database. Is there any
> solution for password encryption in this context?
Yes -- you could use the actions from the modular package and pipe
your pw through the DigestMetaInputModule. There is no authenticator
action but the select action should provide similar enough
functionality.
Chris.
--
C h r i s t i a n H a u l
haul@informatik.tu-darmstadt.de
fingerprint: 99B0 1D9D 7919 644A 4837 7D73 FEF9 6856 335A 9E08
---------------------------------------------------------------------
Please check that your question has not already been answered in the
FAQ before posting. <http://xml.apache.org/cocoon/faq/index.html>
To unsubscribe, e-mail: <co...@xml.apache.org>
For additional commands, e-mail: <co...@xml.apache.org>