Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Date: Sat, 28 May 2011 14:16:47 +0000 (UTC)
From: "Jeff Domeyer (JIRA)" <jira@apache.org>
To: dev@directory.apache.org
Message-ID: 
 <1137367298.50886.1306592207460.JavaMail.tomcat@hel.zones.apache.org>
Subject: [jira] [Created] (DIRKRB-82) Kerberos Requires Plain Text Password
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Kerberos Requires Plain Text Password
-------------------------------------

                 Key: DIRKRB-82
                 URL: https://issues.apache.org/jira/browse/DIRKRB-82
             Project: Directory Kerberos
          Issue Type: New Feature
    Affects Versions: 2.5.0
         Environment: All Environments
            Reporter: Jeff Domeyer
            Assignee: Emmanuel Lecharny
            Priority: Minor
         Attachments: ConfigurableKeyDerivationInterceptor.java

I would imagine a lot of people dislike storing password in LDAP in plain text, and unfortunately the client application is producing the hashed/encrypted password to be stored in LDAP, so when the Kerberos interceptor comes along, it can only use plain text passwords to calculate the Kerberos keys.

I created a subclass of KeyDerivationInterceptor, that when configured, will replace the plain text password with a hash of your choice.
(Looks like I can't attach here, will try attaching after creation of issue).

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira