Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LdapLoginModule support for Jetty Password obfuscation #12350

Closed
nbiqvia opened this issue Oct 7, 2024 · 3 comments · Fixed by #12380
Closed

LdapLoginModule support for Jetty Password obfuscation #12350

nbiqvia opened this issue Oct 7, 2024 · 3 comments · Fixed by #12380
Assignees

Comments

@nbiqvia
Copy link

nbiqvia commented Oct 7, 2024

Jetty version(s)

= 10

Enhancement Description
The LdapLoginModule (org.eclipse.jetty.jaas.spi.LdapLoginModule) doesn't support Jetty password obfuscation.

The module login configuration often need a bindPassword, it would be nice for such configuration to be compliant with the rest of Jetty configuration and support Password obfuscation

sbordet added a commit that referenced this issue Oct 11, 2024
Now using Credential.getCredential() to mangle the bind password provided in the options.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
@sbordet sbordet self-assigned this Oct 11, 2024
@sbordet
Copy link
Contributor

sbordet commented Oct 11, 2024

This is going to be fixed in Jetty 12.

@nbiqvia
Copy link
Author

nbiqvia commented Oct 14, 2024

Can we add this to Jetty 10.x.x and 11.x.x? happy to create the PR in case

@sbordet
Copy link
Contributor

sbordet commented Oct 14, 2024

@nbiqvia sorry but Jetty 10/11 are at end of community support, see the table here:

You can contact Webtide for commercial support.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: ✅ Done
Development

Successfully merging a pull request may close this issue.

2 participants