Uploaded image for project: 'JOC - JobScheduler Operations Center'
  1. JOC - JobScheduler Operations Center
  2. JOC-328

shiro.ini - already hashed passwords are not considered when automatic hashing through Account Manager functionality occurs

    XMLWordPrintable

Details

    • Fix
    • Status: Dismissed (View Workflow)
    • Major
    • Resolution: Works as designed
    • 1.11.5
    • 1.11.5
    • None
    • None

    Description

      Current Situation
      A password hash was generated with the CLI \shiro-tools-hasher\1.3.2> java -jar shiro-tools-hasher-1.3.2-cli.jar --algorithm SHA-512 -p as described in JOC-270.
      Only one user got this password hash, all other users still had the clear text password.
      Using Manage Accounts in JOC to update a current user results in all passwords for all users in shiro.ini were hashed afterwards.
      The User with the already existing password hash cannot login anymore, because the already existing hash was presumed a password and hashed again.

      Desired Behavior
      When an Administrator creates a password hash with the CLI tool from shiro for one user, the automatic password hashing of the Manage Account function in JOC is not allowed to rehash the already exisitng password hash. It should recognize, that the already existing password hash is a hash and not a clear text password.

      Attachments

        Issue Links

          Activity

            People

              ur Uwe Risse
              sp Santiago Aucejo Petzoldt
              Santiago Aucejo Petzoldt Santiago Aucejo Petzoldt
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: