tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: Password Authentication Lib?
Date Thu, 29 Dec 2016 15:59:48 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Roger,

On 12/22/16 10:11 PM, Roger Marquis wrote:
>>> I have a change-password form that must validate the current 
>>> user's password and am unable to find a Tomcat (8.0) method to
>>> use for this. It's not in FormAuthenticator or any other class
>>> I could find.  Pointers would be appreciated.
>> 
>> It's complicated, but you can do it. What exact version of Tomcat
>> 8 are you running?
> 
> 8.0.39 now but the plan is to update to 8.5 once this is
> worked-out.

On 12/29/16 10:07 AM, Roger Marquis wrote:
> Do you know how much I should expect to pay someone to write this 
> method?  Is it anything you'd be interested in writing and is it 
> something that shouldn't be open sourced?

The code has already been written.

http://people.apache.org/~schultz/ApacheCon%20NA%202016/Seamless%20Upgra
des%20for%20Credential%20Security%20in%20Apache%20Tomcat.pdf

Read the whole thing, but what you are really interested in starts on
slide #29.

I think that most useful things ought to be open-sourced. Feel free to
make a donation to the ASF if you'd like.

Hope that helps,
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=wo79
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message