Eclipse Community Forums: Virgo » Virgo Management Console Password Encryption

Help

Home

Home » Eclipse Projects » Virgo » Virgo Management Console Password Encryption

Show: Today's Messages :: Show Polls :: Message Navigator

Virgo Management Console Password Encryption [message #1801853]

Mon, 28 January 2019 13:32

Joel Traber

Messages: 11
Registered: October 2015

Junior Member

Hi guys,

The password to login into the Virgo Management Console is provided plain text in the property file: SERVER_HOME/configuration/org.eclipse.virgo.kernel.users.properties

Is there a way to provide that in an encrypted form to Virgo?
(One of our customers follows strictly the security policy to not have plain text pw in the property files.)

I appreciate if someone can give us a hint how we can address that requirement.

Thanks, Joël

Report message to a moderator

Re: Virgo Management Console Password Encryption [message #1801854 is a reply to message #1801853]

Mon, 28 January 2019 13:38

GianMaria Romanato

Messages: 57
Registered: November 2015

Member

Hi Joel,

Virgo uses JAAS (Java Authentication and Authorization Service) Login modules [1] for authentication.
The login modules are declared in file: $VIRGO_HOME/configuration/org.eclipse.virgo.kernel.authentication.config

You can make the password protected by providing your own implementation of a LoginModule and declaring it in the config file in place of the default one. You can look into the Virgo login module for a reference [2]

[1] https://docs.oracle.com/javase/7/docs/api/javax/security/auth/spi/LoginModule.html
[2] https://github.com/eclipse/virgo.nano/blob/master/org.eclipse.virgo.nano.authentication/src/main/java/org/eclipse/virgo/nano/authentication/KernelLoginModule.java

Report message to a moderator

Re: Virgo Management Console Password Encryption [message #1801862 is a reply to message #1801854]

Mon, 28 January 2019 15:22

GianMaria Romanato

Messages: 57
Registered: November 2015

Member

I forgot to mention, that due to OSGi classloading, Virgo uses the Web App class loader to load the login module class declared in the file.

If you are making a login module for your own Web application you must place the login module class in a bundle and import the corresponding package in the Web Application Bundle that uses that login module.

If instead you want to change the login module of the Virgo admin console, you have most likely to make the bundle that contains the login module a fragment of the Gemini Web bundle (or some other catalina bundle).

Report message to a moderator

Previous Topic:	Problem deploying web bundle with latest Eclipse and Virgo 3.7.2
Next Topic:	Which Version Eclipse IDE for JSF2.2

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Thu Apr 25 04:28:58 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter