Help needed for Username Password Authorizer

[daud-silvergrey]

Hi,

I have set up a PDF Signer worker with the following configuration:

• Username Password Authorizer
• AUTHTYPE | org.signserver.server.UsernamePasswordAuthorizer

I am attempting to configure user accounts as follows:

• USER.[NAME] = [PASSWORD]
• USER.[NAME] = [HASHED_PASSWORD]:[HASH_ALGORITHM]
• USER.[NAME] = [HASHED_PASSWORD]:[HASH_ALGORITHM]:[SALT]

However, I am encountering difficulties in implementing this. Please assist me in configuring user accounts using these properties.

[netmackan]

Example from the unit tests:

signserver-ce/signserver/modules/SignServer-Test-System/src/test/java/org/signserver/server/UsernamePasswordAuthorizerTest.java

Lines 80 to 83 in 6f53e0d

	// Add a user account: user3, foo123 (SHA1 hashed password and salted
	// with "salt123") = SHA1(foo123salt123)
	workerSession.setWorkerProperty(getSignerIdDummy1(), "USER.USER3",
	"26c110963ad873c9b7db331e4c3130c266416d47:SHA1:salt123");

In this case:
Username: user3
Password: foo123
Salt: salt123
USER.USER3=26c110963ad873c9b7db331e4c3130c266416d47:SHA1:salt123

Where you can for instance compute the value using:

$ echo -n "foo123salt123" | sha1sum

Note: a stronger hash algorithm should be used or if higher security or flexibility is wanted to instead consider using a reverse proxy in front and do the authentication there.