Mailing-List: contact jetspeed-dev-help@portals.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jetspeed Developers List" <jetspeed-dev@portals.apache.org>
From: DavidSeanTaylor <david@bluesunrise.com>
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\))
Subject: Re: How to decode stored passwords
In-Reply-To: <2e8e220d-99c3-ad89-adff-a808448201a4@cone.it>
Date: Mon, 30 Jan 2017 20:33:51 -0800
Content-Transfer-Encoding: quoted-printable
Message-Id: <F64B3532-5DC2-4B90-A174-623C5061B672@gmail.com>
References: <2e8e220d-99c3-ad89-adff-a808448201a4@cone.it>
To: Jetspeed Developers List <jetspeed-dev@portals.apache.org>
archived-at: Tue, 31 Jan 2017 04:34:10 -0000

Did you also uncomment =
org.apache.jetspeed.security.PasswordEncodingService in =
security-spi-atn.xml?
There are 2 beans to choose from there:

1.=20

<!-- A Two-way encoding password service which also implements =
CredentialPasswordEncoder
    this Service can be used instead of for example the default provided =
MessageDigestCredentialPasswordEncoder
    <bean id=3D"org.apache.jetspeed.security.PasswordEncodingService"
    name=3D"org.apache.jetspeed.security.spi.CredentialPasswordEncoder"
    class=3D"org.apache.jetspeed.security.spi.impl.PBEPasswordService">
    <constructor-arg index=3D"0">
    <!- secret PBE key password ->
    <value>********</value>
    </constructor-arg>      =20
    </bean>      =20
  -->

2.=20
  <!-- A Two-way encoding password service which also implements =
CredentialPasswordEncoder
    Furthermore, this extension of the PBEPasswordService supports lazy =
upgrading from an old CredentialPasswordEncoder
    like the default provided MessageDigestCredentialPasswordEncoder
    ->
    <bean id=3D"org.apache.jetspeed.security.PasswordEncodingService"
    name=3D"org.apache.jetspeed.security.spi.CredentialPasswordEncoder"
    =
class=3D"org.apache.jetspeed.security.spi.impl.AlgorithmUpgradePBEPassword=
Service">
    <constructor-arg index=3D"0">
    <!- secret PBE key password ->
    <value>********</value>
    </constructor-arg>
    <constructor-arg index=3D"1">
    <!- old MessageDigestCredentialPasswordEncoder to be upgrading from, =
using SHA-1 ->
    <bean =
class=3D"org.apache.jetspeed.security.spi.impl.MessageDigestCredentialPass=
wordEncoder">
    <constructor-arg index=3D"0"><value>SHA-1</value></constructor-arg>  =
    =20
    </bean>      =20
    </constructor-arg>
    <constructor-arg index=3D"2">
    <!- startPBEPasswordEncodingService: date before which old encoded =
passwords need to be recoded (on authentication)
    (SimpleDateFormat) format: yyyy-MM-dd HH:mm:ss
    ->
    <value>2006-07-02 15:00:00</value>
    </constructor-arg>
    </bean>
  -->

> On Jan 30, 2017, at 8:00 AM, Giacomo Morri <giacomo.morri@cone.it> =
wrote:
>=20
> Hi, i'm trying to implement a function that permit to login in =
jetspeed "as a user".
> I've tried to decode users password using the =
"PasswordEncodingService", but trying to enable it i retrieve an error =
in jetspeed log:
>=20
> "Error creating bean with name 'PortalServices' defined in =
ServletContext resource [/WEB-INF/assembly/jetspeed-services.xml]: =
Cannot resolve reference to bean =
'org.apache.jetspeed.security.PasswordEncodingService' while setting =
constructor argument with key [TypedStringValue: value =
[PasswordEncodingService], target type [null]]; nested exception is =
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean =
named 'org.apache.jetspeed.security.PasswordEncodingService' is defined"
>=20
> How can i enable the api PasswordEncodingService?
>=20
> Best regards,
> Giacomo Morri


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org