Encrypted Passwords in Databases

Hello yet again :)How does the passthrough authentication to a database table know what scheme was used to encrypt the password? Is it expecting to have plain text? Can I configure the encryption scheme? I am having a hard time finding documentation about

[299 byte] By [JimBeard] at [2007-11-26 9:24:15]

«« Backup Methods
»» Failed to install a patch. 120445-01

# 1

Does anyone know about this? Can it even handle encryption?

JimBeard at 2007-7-6 23:59:37 >

top of Java-index,Web & Directory Servers,Directory Servers...

# 2

Anyone?

JimBeard at 2007-7-6 23:59:37 >

# 3

No one knows about this?

JimBeard at 2007-7-6 23:59:37 >

# 4

Is there documentation for the Database Table Login Module? So far it seems like I might want to modify the Database Table Login Module to include whatever form of encryption that I might incorporate into the storage of my password in the database... Does it sound like I'm getting closer to finding my answer?

JimBeard at 2007-7-6 23:59:37 >

# 5

Quite an interesting question. Did you find the solution?

I guess for pass-through authentication, you can let IdM provision user information to the database table using the corresponding adapter. That way, the encryption used would be the same as expected during pass-through authentication... hence, you wouldn't have to worry about what encryption to use... makes sense or am I digressing?

There is some information on encryption in "IDM_Administration_2005Q4M3.pdf" page 189.. but not sure how much that helps here.

- Adi.

adimut at 2007-7-6 23:59:37 >

# 6

I have not found the solution. Thanks for asking though :)

The area of the docs you pointed me at was good to review. The last few days I have been trying to figure out how to go about this task. We have a password we want to use to originally authenticate a user with, and this password is not being generated by IDM. However we want to allow passthrough authentication in IDM to allow an enduser to authenticate with the password. You suggestion makes sense, but wouldn't quite work to meet our needs. Right now I'm wondering if we should make a custom resource adapter to handle it... I can not really find any good documentation on Login Modules.

JimBeard at 2007-7-6 23:59:37 >

Web & Directory Servers

Directory Servers

Java programming resources: FAQs, tutorials, compiler and browser download sites, documentation, books lists, IDEs, etc.

Encrypted Passwords in Databases

Web & Directory Servers New Topic

Web & Directory Servers Hot Topic

Web & Directory Servers

All Classified