Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-4298

DatabaseServerLoginModule doesn't support SHA-512 with Java 8

    XMLWordPrintable

Details

    • Feature Request
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Out of Date
    • 8.2.0.Final
    • 11.0.0.Alpha1
    • Security
    • None

    Description

      I tried to use the following security domain configuration:

      <security-domain name="secureDomain" cache-type="default">
      <authentication>
      <login-module code="Database" flag="required">
      <module-option name="dsJndiName" value="java:jboss/datsources/MySQLTestDS"/>
      <module-option name="principalsQuery" value="SELECT password FROM user WHERE email=?"/>
      <module-option name="rolesQuery" value="select role, 'Roles' from role where email=?"/>
      <module-option name="hashAlgorithm" value="SHA-512"/>
      <module-option name="hashEncoding" value="base64"/>
      </login-module>
      </authentication>
      </security-domain>

      And never got a user successfully authenticated. Works with hashAlgorithm SHA-256

      Attachments

        Activity

          People

            darran.lofthouse@redhat.com Darran Lofthouse
            meisele@redhat.com Markus Eisele (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: