Whats the purpose of User Organizational Unit ?

2016-10-10 Thread Patrick Brunmayr
I want to know whats the purpose of User Organizational Unit ? Is it a kind of group assignment to the user ? Or what can i do with it ? Thx LINZ AG für Energie, Telekommunikation, Verkehr und Kommunale Dienste A-4021 Linz, Wiener Straße 151, Postfach 1300, Tel. +43/732/3400-0, E-Mail:

Password as String or char[]?

2016-10-10 Thread Shawn McKinney
Hello, recently a question came up that brought up an old question. How should the password be represented in code. Here is how it is now: public class User extends FortEntity implements Constraint, Serializable { private String userId; private char[] password; … } I changed it to a

Re: Password as String or char[]?

2016-10-10 Thread Steve Moyer
I've seen the same security recommendations related to passwords being long-lived in memory so I'm curious to hear how what you'd like the XML to look like. Steve “Object-oriented programming is an exceptionally bad idea which could only have originated in California.” – Edsger Dijkstra

Re: Password as String or char[]?

2016-10-10 Thread Kiran Ayyagari
On Mon, Oct 10, 2016 at 10:53 PM, Shawn McKinney wrote: > Hello, > > recently a question came up that brought up an old question. How should > the password be represented in code. > > Here is how it is now: > > public class User extends FortEntity implements Constraint,

Re: Password as String or char[]?

2016-10-10 Thread Shawn McKinney
> On Oct 10, 2016, at 1:49 PM, Steve Moyer wrote: > > I've seen the same security recommendations related to passwords being > long-lived in memory so I'm curious to hear how what you'd like the XML to > look like. Hey Steve, I’ve been meaning to tell you that I watched your

Re: Password as String or char[]?

2016-10-10 Thread Steve Moyer
Thanks for the kind words ... I was going to offer to be on your BOF panel (since you were at the time a panel of one) but when I went to add the session to my schedule, it was gone. It feels like we're making progress with it here at PSU anyway. I should have expected your answer below ...

Re: assertContext detected null entity for method [org.apache.directory.fortress.core.impl.UserP.createSession]

2016-10-10 Thread Shawn McKinney
> On Oct 10, 2016, at 10:09 AM, Patrick Brunmayr wrote: > > Tried this > > > HOME > xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;> > test > 112 > 97 > 115 > 115 > 119 > 111 > 114 >

Where to put fortress-core-1.0.1.jar

2016-10-10 Thread Patrick Brunmayr
Hello Just a basic question. Where to put fortress-core-1.0.1.jar and its config folder ? Following the docs its not clear where to put them. I want to use the Web and Rest functionality in tomcat but i dont know where i have to put fortress-core-1.0.1.jar and it config folder. Is tomcat/lib

assertContext detected null entity for method [org.apache.directory.fortress.core.impl.UserP.createSession]

2016-10-10 Thread Patrick Brunmayr
Hi I am calling http://localhost:8080/fortress-rest-1.0.1/rbacCreate/ using BASIC auth with the demoUser4 from samples which was added applaying FortressRestServerPolicy.xml! In the test files there is a sample file called createSession.xml HOME

Re: Whats the purpose of User Organizational Unit ?

2016-10-10 Thread Shawn McKinney
> On Oct 10, 2016, at 9:17 AM, Patrick Brunmayr wrote: > > I want to know whats the purpose of User Organizational Unit ? > > Is it a kind of group assignment to the user ? Or what can i do with it ? > http://iamfortress.net/2015/06/11/what-is-delegated-administration/