directory-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "UdayaKiran Ala" <uday.mail...@gmail.com>
Subject Re: Getting a clear text password from Apache DS 1.5.0
Date Thu, 13 Dec 2007 09:55:41 GMT
HI All,

 Yes, I can retrieve a password if it is stored as clear text password.
Below is the sample code snippet


Attribute oPwdAttr = attrs.get(ATTR_PASSWORD);

byte[] pwd = (byte[]) oPwdAttr.get();

String sPwd = new String(pwd);
System.out.println("password is "+sPwd);


Thanks
Uday



On 12/13/07, UdayaKiran Ala <uday.mailing@gmail.com> wrote:
>
> Hi Emmanuel,
>
> Thanks for your mail & information.
>
>  Yes,  as you said I stored the password in "Plain Text". I'm trying to
> retrieve the password by using JNDI, but still I could'nt get the exact
> password value.
>
>   It would be great to me, if you provide any sample snippet code.
>
> Thanks & Regards
> UdayaKiran.Ala
>
>
>
> On 12/13/07, UdayaKiran Ala <uday.mailing@gmail.com> wrote:
> >
> > Hi Emmanuel,
> >
> > Thanks for your mail & information.
> >
> >  Yes,  as you said I stored the password in "Plain Text". I'm trying to
> > retrieve the password by using JNDI, but still I could'nt get the exact
> > password value.
> >
> > Thanks & Regards
> > UdayaKiran.Ala
> >
> >
> >  On 12/12/07, Emmanuel Lecharny <elecharny@gmail.com > wrote:
> > >
> > > UdayaKiran Ala wrote:
> > > > Hi All,
> > > >
> > > >  I'm using Apache Directory Server 1.5.0 for our application
> > > authentication.
> > > >
> > > >  I need to retrieve the cleartext password  (userPassword) by using
> > > JAVA API
> > > >
> > > >   Any idea?
> > > >
> > > It depends... If the password is stored as clear text into the server,
> > > no problem (beside the huge security concern, of course !) : do a
> > > search
> > > with (uid=<your user ID>) and get the userPassword attribute using
> > > JNDI.
> > > If the password is encrypted using (S)SHA, (S)MD5 or crypt, there is
> > > no
> > > way you can get the clear text from it.
> > > >  Thanks in Advance,
> > > >
> > > > Regards
> > > > UdayaKiran.Ala
> > > >
> > > >
> > >
> > >
> > > --
> > > --
> > > cordialement, regards,
> > > Emmanuel L├ęcharny
> > > www.iktek.com
> > > directory.apache.org
> > >
> > >
> > >
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message