Eclipse Community Forums: EMF

Help

Home

Home » Modeling » EMF » [CDO] Security

Show: Today's Messages :: Show Polls :: Message Navigator

[CDO] Security [message #430360]

Sun, 17 May 2009 05:46

Anders Forsell

Messages: 127
Registered: July 2009

Senior Member

I need to hash passwords that will be used to authenticate CDO connections
using the default challenge/response negotiator. Can I reuse the encrypt
method in SecurityUtil to do this?

In the latest source the salt and iteration count are hard-coded with TODOs
to make them configurable. I guess it is somewhat important for me to
configure these settings in a less open way since they are now specified in
open-source :-)

Any plans to fix this before the 2.0 release? (I can open a Bugzilla if
needed)

Thanks,

---
Anders

Report message to a moderator

Re: [CDO] Security [message #430361 is a reply to message #430360]

Sun, 17 May 2009 06:31

Eike Stepper

Messages: 6682
Registered: July 2009

Senior Member

Anders,

Yes, this should be easy. Please file a bugzilla.

Cheers
/Eike

----
http://thegordian.blogspot.com

Anders Forsell schrieb:
> I need to hash passwords that will be used to authenticate CDO
> connections using the default challenge/response negotiator. Can I
> reuse the encrypt method in SecurityUtil to do this?
>
> In the latest source the salt and iteration count are hard-coded with
> TODOs to make them configurable. I guess it is somewhat important for
> me to configure these settings in a less open way since they are now
> specified in open-source :-)
>
> Any plans to fix this before the 2.0 release? (I can open a Bugzilla
> if needed)
>
> Thanks,
>
> ---
> Anders

Cheers
/Eike

----
http://www.esc-net.de
http://thegordian.blogspot.com
http://twitter.com/eikestepper

Report message to a moderator

Re: [CDO] Security [message #430364 is a reply to message #430361]

Sun, 17 May 2009 19:11

Anders Forsell

Messages: 127
Registered: July 2009

Senior Member

Added Bugzilla https://bugs.eclipse.org/bugs/show_bug.cgi?id=276627

---
Anders
"Eike Stepper" <stepper@esc-net.de> skrev i meddelandet
news:guob0f$bq1$1@build.eclipse.org...
> Anders,
>
> Yes, this should be easy. Please file a bugzilla.
>
> Cheers
> /Eike
>
> ----
> http://thegordian.blogspot.com
>
>
>
> Anders Forsell schrieb:
>> I need to hash passwords that will be used to authenticate CDO
>> connections using the default challenge/response negotiator. Can I
>> reuse the encrypt method in SecurityUtil to do this?
>>
>> In the latest source the salt and iteration count are hard-coded with
>> TODOs to make them configurable. I guess it is somewhat important for
>> me to configure these settings in a less open way since they are now
>> specified in open-source :-)
>>
>> Any plans to fix this before the 2.0 release? (I can open a Bugzilla
>> if needed)
>>
>> Thanks,
>>
>> ---
>> Anders

Report message to a moderator

Previous Topic:	derived, volatile, not changeable, BUT NOT transient: error on resource creation
Next Topic:	Proxy=true after reloading genmodel

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Apr 26 09:25:03 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter