Re: Using CredentialHandlers in application code

2015-10-07 Thread Mark Thomas
On 07/10/2015 16:33, Christopher Schultz wrote: > Mark, > > On 10/6/15 2:44 PM, Mark Thomas wrote: >> On 06/10/2015 18:05, Christopher Schultz wrote: >>> All, >>> >>> We (somewhat) recently introduced the CredentialHandler to Tomcat in >>> order to make it easier to use different password-munging

Re: Using CredentialHandlers in application code

2015-10-07 Thread Christopher Schultz
Mark, On 10/6/15 2:44 PM, Mark Thomas wrote: > On 06/10/2015 18:05, Christopher Schultz wrote: >> All, >> >> We (somewhat) recently introduced the CredentialHandler to Tomcat in >> order to make it easier to use different password-munging strategies >> along with all the Realm implementations. A g

Re: Using CredentialHandlers in application code

2015-10-06 Thread Mark Thomas
On 06/10/2015 18:05, Christopher Schultz wrote: > All, > > We (somewhat) recently introduced the CredentialHandler to Tomcat in > order to make it easier to use different password-munging strategies > along with all the Realm implementations. A good example is using a hash > like SHA-256 in one ca

Using CredentialHandlers in application code

2015-10-06 Thread Christopher Schultz
All, We (somewhat) recently introduced the CredentialHandler to Tomcat in order to make it easier to use different password-munging strategies along with all the Realm implementations. A good example is using a hash like SHA-256 in one case (using MessageDigest) and using PBKDF2 in another case (u