Hi I got this working by following your advice, Les....I changed the above
code to:

            String salt = passwordSaltAndRolesArray[1];
            ByteSource saltSrc = new
SimpleByteSource(Base64.decode(salt.getBytes()));

I also had to overload the SimpleAccountRealm.addAccount method in my
SaltedPropertiesRealm to add the salt into the SimpleAccount object when
adding to the account to the realm, both on creation and when reading from
the properties file.  

This did seem uncharacteristically fiddly for Shiro, I look forward to
having a play with the PasswordService under 1.2.

Thanks for your help,

-James


--
View this message in context: 
http://shiro-user.582556.n2.nabble.com/hashed-salted-passwords-and-realm-authentication-tp7050618p7054633.html
Sent from the Shiro User mailing list archive at Nabble.com.

Reply via email to