Password hashing in JBoss EAP 5 / 4
Issue
- Is it possible to hash the passwords (found in *conf/props/jmx-console-users.properties *) used to log in to the JBoss console (jmx-console)?
- jmx-console web application is secured through JAAS realm and properties files located in conf/props. How can I encrypt password in jmx-console-users.properties ?
- At present, there are serveral modules in EAP 5.1 where we input character based password in properties files. e.g 1.jmx-console-users.properties, jbossws-users.properties, messaging-users.properties. We currently have a requirement to encrypt these passwords to meet our corporate security standards.
- The remote web server(jboss EAP) contains web pages(jmx-console) that are protected by 'Basic' authentication over plain text, Could you please help us on how to encrypt the jmx-console password?
- How to encrypt the passwords in the configuration files like login-config.xml for jmx-console-users specified under
<application-policy name="brms">? - How do I generate hashed passwords in the MD5 base64 format?
- How to encrypt the password in
jmx-console-users.propertiesused injmx-consolein EAP 5 usingMessageDigest/Base64encryption ?
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 5.x
- 4.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
