RE: Securing ldap password in shiro.ini

2016-08-03 Thread Polina Marasanova
olina From: Vinay Shukla [vinayshu...@gmail.com] Sent: Thursday, 4 August 2016 8:53 AM To: users@zeppelin.apache.org Subject: Re: Securing ldap password in shiro.ini Moon, Polina, Unfortunately the Shiro password hasher won't help. Polina's use case is encrypting password of AD/LDA

Re: Securing ldap password in shiro.ini

2016-08-03 Thread Vinay Shukla
Moon, Polina, Unfortunately the Shiro password hasher won't help. Polina's use case is encrypting password of AD/LDAP that Zeppelin uses to connect to an AD/LDAP. The shiro password hasher encrypts the password that zeppelin stores when AD/LDAP is not used and user accounts are kept in shiro its

Re: Securing ldap password in shiro.ini

2016-08-03 Thread moon soo Lee
You can check http://shiro.apache.org/configuration.html#Configuration-EncryptingPasswords http://shiro.apache.org/command-line-hasher.html It looks useful to encrypt user's password. Document says it works for any other type of resources as well. I didn't tried it but hope it works your case, too

Securing ldap password in shiro.ini

2016-08-01 Thread Polina Marasanova
Hi everyone, I'm using Zeppelin with Active Directory authentication. Our LDAP server requires authentication as well. The problem that in shiro.ini ldap password is still visible and user can browse it via %sh interpreter activeDirectoryRealm.systemUsername = my_login activeDirectoryRealm.syst