Adding or modifying a user account when password hashing and LDAP & INI realms are active corrupts all passwords

Current Situation

When a User Account is added or modified in the Manage Accounts view and:

• mixed LDAP and INI authentication realms are configured and
• Password hashing is active

then all INI passwords will be corrupted and encrypted passwords set for the LDAP Accounts.

Tested with the "Short example for public LDAP Server with mixed LDAP and Shiro Authentication" configuration described here

Desired Behaviour

It should be possible to use the Manage Accounts view to add and edit User Accounts without blocking access.

Workarounds

Use a text editor to edit the shiro.ini file to:

• deactivate password hashing by commenting out the following lines in the main section of the file:
  • passwordMatcher = org.apache.shiro.authc.credential.PasswordMatcher
  • iniRealm.credentialsMatcher = $passwordMatcher
• replace the encrypted INI passwords in the users section with plain text passwords
• remove the encrypted LDAP passwords:
  • Example: ldap_admin = ,administrator

Restart the Web Services