https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/AAA-46 aaa <p>aaa users' passwords are stored and compared in clear text. This is a security vulnerability; passwords should be encrypted using a one way encryption mechanism, and digests should be compared instead of the clear text password.</p> <p>Operating System: All<br/> Platform: All</p> AAA-46

aaa passwords are stored in clear text

Bug Resolved Done Sharon Aicler Ryan Goulding Wed, 1 Jul 2015 20:10:16 +0000 Thu, 21 Mar 2019 11:56:41 +0000 Tue, 25 Aug 2015 12:44:47 +0000 General 0 1 <p>Sharon,</p> <p>I have a working prototype for this; it was an AAA backlog item and a bug. I forgot to select the "take" button. I don't want to duplicate work; have you already created a patch for this? If so, I will abandon my work. Otherwise, I have a working prototype using MD5, and am changing it today to use stronger encryption.</p> <p>Thanks,<br/> Ryan</p> <p>Hi Ryan,<br/> Yes, I have submitted a patch for review.I have used MD5 as well + I added SALT for better security.<br/> Let me add you as a reviewer for the patch...</p> <p>Thanks for the prompt reply; please add me as a reviewer. Should we be using something a bit more heavyweight such as PBKDF2WithMacSHA1?</p> <p><a href="https://git.opendaylight.org/gerrit/#/c/24085/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/24085/</a></p> <p>Thanks, Sharon. Closing this out now.</p> Development External issue ID 3924 External issue URL Rank 0|i023rj: