On 16/01/2013 09:25, Jan Bernhardt wrote:
[...]
Could you please add how to generate MD5 and SHA1 under Windows?
As far as I know, Windows don't have native command line tools for ms5 or sha1
evaluation.
The best Microsoft native tool I found is "File Checksum Integrity Verifier"
utility [1].
This tool can only works with files. It requires to save cleartext password in a file and
run at command prompt "fciv.exe -sha1|-md5 password.txt". It seems to produce
expected values :)
Alternatives could be CoreUtils for Windows [2] or Cygwin [3].
Which solution do you suggest as a reference for Syncope documentation? (all of
them? :))
Probably giving more alternatives is better, in this case.
Does Anybody knows a better solution?
How about just linking to this website: http://www.hashgenerator.de/
It is a very simple to use platform independent way of generating (SHA1, MD5,
...) hash values.
...giving my Syncope admin password to a public website? Hum....
Do you thing adding a Java native command line tool to Syncope can make it
easyer?
This command actually exists, at least in trunk [4] (an it can easily
backported to 1_0_X); it only needs some additional work: a main() with
input validatation and some hang to call it via Maven.
...any volunteer?
[1] - http://support.microsoft.com/kb/841290
[2] - http://gnuwin32.sourceforge.net/packages/coreutils.htm
[3] - http://cygwin.com/
[4]
https://svn.apache.org/repos/asf/syncope/trunk/core/src/main/java/org/apache/syncope/core/util/PasswordEncoder.java
P.S. I propose to add following note to the documentation: If special
characters are used in cleartext password, expected encoding is UTF-8.
Fair enough.
Regards.
--
Francesco Chicchiriccò
ASF Member, Apache Syncope PMC chair, Apache Cocoon PMC Member
http://people.apache.org/~ilgrosso/
