Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-9132

Add a parameter in digest login plugin to specify the field use to retrieve password

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 5.5
    • Fix Version/s: 5.5.0-HF06, 5.6-RC1, 5.6
    • Component/s: Directory
    • Upgrade notes:
      Hide

      The new parameter "passwordField" can be set to specify the field used to get the digest:
      <extension target="org.nuxeo.ecm.platform.login.LoginPluginRegistry"
      point="plugin">
      <LoginPlugin name="DigestLoginPlugin"
      class="org.nuxeo.ecm.ui.web.auth.digest.DigestLoginPlugin">
      <enabled>true</enabled>
      <parameters name="passwordField">password</parameters>
      </LoginPlugin>
      </extension>

      Show
      The new parameter "passwordField" can be set to specify the field used to get the digest: <extension target="org.nuxeo.ecm.platform.login.LoginPluginRegistry" point="plugin"> <LoginPlugin name="DigestLoginPlugin" class="org.nuxeo.ecm.ui.web.auth.digest.DigestLoginPlugin"> <enabled>true</enabled> <parameters name="passwordField">password</parameters> </LoginPlugin> </extension>

      Description

      The default behaviour only uses the parameter passwordField set in the directory configuration to get the digest.
      This works well with a SQL directory where every field can be read without problem.
      But in a LDAP Directory, for securiry reasons, we didn't fetch the password for an entry.

      In that case, it's not possible to authenticate via digest auth if the digest is in a LDAP directory

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: