Hi,

To encrypt a password in user-mgt.xml with cipher tool and then decrypt, it
should have the bellow formats according to [1].
"UserManager.Configuration.Property." + propertyName
"UserStoreManager.Property." + propertyName

This is not mentioned in the documentation [2] and it is hard to track the
issue with the logs (because it says only the credentials are invalid).
Userstore connection password does not comes in cipher-tool.properties by
default. And this makes it even harder to figure out the issue.

I have created a jira ticket to track this issue [3].

I'm not sure why these values are had coded. But I think it doesn't have to
be hard coded. We can simply find the property value in the xml element
with the namespace and the property name. If there is a particular reason
to do it in this way, at least update it in the documentation.

[1]
https://github.com/wso2/carbon-kernel/blob/4.4.x/core/org.wso2.carbon.user.core/src/main/java/org/wso2/carbon/user/core/config/RealmConfigXMLProcessor.java#L574-L581
[2]
https://docs.wso2.com/display/Carbon443/Encrypting+Passwords+with+Cipher+Tool
[3] https://wso2.org/jira/browse/IDENTITY-4775

Thanks,
Maduranga.

-- 
Maduranga Siriwardena
Software Engineer
WSO2 Inc.

mobile: +94718990591
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to