users@glassfish.java.net

Re: couple of questions regarding glassfish security

From: <forums_at_java.net>
Date: Tue, 26 Apr 2011 07:38:17 -0500 (CDT)

 

First, is it possible to configure glassfish not to use the hashing while
checking passwords. I have some passwords in datatbase that are not hashed
using any algorithm, but are stored as is. Will it be possible to use
glassfish security jee modules using those passwords?

/Yes, you could set the digest-algorithm param to none in the realm
configuration/

 

    <security-constraint>         <display-name>Donor
Constraint</display-name>         <web-resource-collection>       
     <...>             <url-pattern>/faces/secured/*</url-pattern>
        </web-resource-collection>         <...>    
 </security-constraint>   Why does the glassfish authentication does not
work in the first case?   /The url-pattern in the security-constraint should
begin from the context-root. Please
check //http://download.oracle.com/javaee/5/tutorial/doc/bncbe.html#bncbk/
[1]

  HTH Nithya
 


[1] http://download.oracle.com/javaee/5/tutorial/doc/bncbe.html#bncbk

--
[Message sent by forum member 'nitkal']
View Post: http://forums.java.net/node/795436