Dmitry Smeliansky created DIRSERVER-2179:
--------------------------------------------

             Summary: Password hashing interceptor - password history entries 
are not hashed
                 Key: DIRSERVER-2179
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2179
             Project: Directory ApacheDS
          Issue Type: Bug
            Reporter: Dmitry Smeliansky


Hi.

In order to use the server-side password policy validation - we have to pass 
the passwords as plaintext and not hashed by the client.

Password hashing interceptor hashes the passwords according to the 
configuration, BUT - the new added pwdHistory entry will contain the plaintext 
value of the password.

Is there any way to have the password policy validation on the server and the  
hashed password to be saved in the history at the same time?

Thanks



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to