Another question please, let's say we logged with super admin account and
decided to change his password, what happens with all the config files and
even the classes that mention "admin" as password? Could you explain how
this is going to reflect on IS?


Regards,
Hanen


On Wed, Jul 19, 2017 at 9:28 AM, Hanen Ben Rhouma <[email protected]>
wrote:

> Hello guys,
>
> We're trying to encrypt all sensitive passwords within WSO2 IS including
> super admin password as well as tenant admins passwords, we looked into the
> cipher tool which can be an approach for super admin password encryption
> but not for the tenant admins, tenants passwords are stored within the LDAP
> so they can be hashed but not recovered from their storage area. Do you
> guys tackeled such issues? Is there any external approach that can be used
> for encrypting all the passwords without relying on them being declared in
> config files?
>
>
> Regards,
> Hanen
>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to