In the axis2 client, it looks like it is possible to configure password
authentication with clear text passwords or a password digest.  Like this:

       <passwordType>PasswordText</passwordType>
or

       <passwordType>PasswordDigest</passwordType>



On the Axis2 server, my inflow security is similar to rampart's sample02:
   <parameter name="InflowSecurity">
     <action>
       <items>UsernameToken Timestamp</items>
       <passwordCallbackClass>myClass</passwordCallbackClass>
     </action>
   </parameter>


Is it possible to configure the server to require a Password Digest?  It
would be nice if I can configure the server to fail authentication if the
password sent in clear text.

Thanks,
Kevin

Reply via email to