Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 2544 invoked from network); 7 Feb 2010 10:01:27 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 7 Feb 2010 10:01:27 -0000 Received: (qmail 13486 invoked by uid 500); 7 Feb 2010 10:01:27 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 13404 invoked by uid 500); 7 Feb 2010 10:01:26 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 13396 invoked by uid 99); 7 Feb 2010 10:01:26 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 07 Feb 2010 10:01:26 +0000 X-ASF-Spam-Status: No, hits=1.2 required=10.0 tests=SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [81.169.146.162] (HELO mo-p00-ob.rzone.de) (81.169.146.162) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 07 Feb 2010 10:01:16 +0000 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; t=1265536856; l=807; s=domk; d=labeo.de; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:References: Subject:To:MIME-Version:From:Date:X-RZG-CLASS-ID:X-RZG-AUTH; bh=N3IIB01EECpx5SwpOESRoIHjpiQ=; b=adV098D81syj/Yu+tBWNKQTgBQUJaCpOnr+ObdwWv9xSSFtkE4yWsm4y1Yt6AXQtfoq XlvLBAvbUQPE01lH7Yay1mDoZlqqmrx5KHE9CbeU1k9NEX/FBZew2lOKwlnnBlryRoHd0 xAo7eWycso31Pqy4BHhFNycXVsQb+2hCHvo= X-RZG-AUTH: :P3gBc0GmW/MphhhpU4BSj2bmx/Zwgz97J2mNwJqPPEL+U9r/pmo2y/TpMf+q X-RZG-CLASS-ID: mo00 Received: from [127.0.0.1] (p5DC6D1C9.dip.t-dialin.net [93.198.209.201]) by post.strato.de (klopstock mo5) (RZmta 22.6) with ESMTP id Y0279fm177qQJH for ; Sun, 7 Feb 2010 11:00:56 +0100 (MET) Message-ID: <4B6E8F55.8040502@labeo.de> Date: Sun, 07 Feb 2010 11:00:53 +0100 From: Stefan Zoerner User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Apache Directory Developers List Subject: Re: Implementing a simple interceptor: Adding it to the chain References: <4B6DD32F.3090709@labeo.de> <4B6DF7E6.2080001@gmail.com> In-Reply-To: <4B6DF7E6.2080001@gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Good morning Emmanuel! Emmanuel Lecharny wrote: > I will have a look at it tomorrow. That would be great! Thanks! > Let me check what this interceptor does, and I'll give you some advice > about where to inject it. It tries to fulfill the requirement that no user password should be stored in the directory in clear text. Therefore it intercepts the modify and the add operation, and if a userPassword value is given in plain text by the client, it changes the value of the attribute to a hashed value (algorithm is configurable, defaults to MD5). > Thanks a lot for this doco ! It was great to see how simple it was to accomplish this task. In fact our server is indeed extensible :-) I hope to revise the documentation in the near future. Greetings from Hamburg, StefanZ