[ 
https://issues.apache.org/jira/browse/SLING-6219?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15623335#comment-15623335
 ] 

Robert Munteanu edited comment on SLING-6219 at 10/31/16 8:35 PM:
------------------------------------------------------------------

FWIW in vault content packages the password is set to a SHA-256 hash. It has 
the benefit of not being easily traceable to the plain text value, and also for 
sample code we can add the password in plain text as a comment, e.g.

{noformat}
create user joe with password 
{SHA-256}dc460da4ad72c482231e28e688e01f2778a88ce31a08826899d54ef7183998b5 
#password is blabla
{noformat}


was (Author: rombert):
FWIW in vault content packages the password is set to a SHA-256 hash. It has 
the benefit of not being easily traceable to the plain text format, and also 
for sample code we can add the password in plain text as a comment, e.g.

{noformat}
create user joe with password 
{SHA-256}dc460da4ad72c482231e28e688e01f2778a88ce31a08826899d54ef7183998b5 
#password is blabla
{noformat}

> Allow to create users with repoinit
> -----------------------------------
>
>                 Key: SLING-6219
>                 URL: https://issues.apache.org/jira/browse/SLING-6219
>             Project: Sling
>          Issue Type: New Feature
>          Components: JCR, Repoinit
>            Reporter: Carsten Ziegeler
>             Fix For: Repoinit Parser 1.0.4, Repoinit JCR 1.0.4
>
>
> it seems it's not possible to create a user through the repoinit. 
> This would be very useful for sample apps and testing. For example, the
> slingshot sample app currently needs an admin user to create the sample
> user accounts. And therefore slingshot needs to be in the whitelist for
> admin usage - which is not a good thing
> I suggest we add:
> create user {name}
> create user {name} {password}
> delete user {name}
> If no pw is provided for create user, we create a random pw



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to