Hi there, I have an issue between CAS and Moodle (a PHP LMS) where the passwords generated by PHP are encrypted with the fixed version of blowfish ($2y...) but in CAS 5.1.x that is using Spring security the blowfish version is not the fixed one ($2a...). Therefore I cant validate users. A manual fix is to change the $2y for $2a in the password and this works. Problem is that this can't be implemented. I've been trying to replace the Spring Security Bcrypt library for JBcrypt library <https://github.com/jeremyh/jBCrypt> but I am new to the springframework and can't make it work. Tried to add it as a dependency on the project file and in the cas config as a custom password encoder but no luck. What would be the best way to solve this? What is your advice and how should I proceed? I am using CAS overlay 5.1.4
Thanks in advance, Christian cas.authn.jdbc.query[0].sql=SELECT * FROM user WHERE username=? cas.authn.jdbc.query[0].url=jdbc:mysql://localhost:3306/db cas.authn.jdbc.query[0].dialect=org.hibernate.dialect.MySQLDialect cas.authn.jdbc.query[0].user=root cas.authn.jdbc.query[0].password=password cas.authn.jdbc.query[0].driverClass=com.mysql.cj.jdbc.Driver cas.authn.jdbc.query[0].fieldPassword=password cas.authn.jdbc.query[0].autocommit=false cas.authn.jdbc.query[0].passwordEncoder.type=org.mindrot.jbrcypt cas.authn.jdbc.query[0].passwordEncoder.encodingAlgorithm=BLOWFISH cas.authn.jdbc.query[0].passwordEncoder.characterEncoding=UTF-8 -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d15067fb-85ee-4091-82f4-44f3ddf856e7%40apereo.org.
pom.xml
Description: XML document
