Loading...

XML

Word

Printable

Type: Enhancement
Resolution: Done
Priority: Major
Fix Version/s: 6.2.0
Affects Version/s: 6.2.0
Component/s: None
Labels:
None

Epic Link:
FUSEDOC-97
Sprint:
Sprint 2015-K

In JBoss FUSE 6.2 we introduce a org.apache.karaf.jaas.modules.properties.AutoEncryptionSupport class to automatically encrypt the passwords in users.properties without login if users configure the jaas realm to enable the encryption. So in "Encrypting Stored Passwords" section, besides the encryption properties in <jaas:module..., aslo need add AutoEncryptionSupport bean configuration like

<bean class="org.apache.karaf.jaas.modules.properties.AutoEncryptionSupport"
            init-method="init" destroy-method="destroy">
        <argument>
            <map>
                <entry key="org.osgi.framework.BundleContext" value-ref="blueprintBundleContext"/>
                <entry key="users" value="$[karaf.base]/etc/users.properties"/>
                <entry key="encryption.name" value="jasypt"/>
                <entry key="encryption.enabled" value="true"/>
                <entry key="encryption.prefix" value="{CRYPT}"/>
                <entry key="encryption.suffix" value="{CRYPT}"/>
                <entry key="encryption.algorithm" value="SHA-256"/>
                <entry key="encryption.encoding" value="base64"/>
                <entry key="encryption.iterations" value="100000"/>
                <entry key="encryption.saltSizeBytes" value="16"/>
            </map>
        </argument>
    </bean>