•  
      story #8059 Store passwords in a secure way
    Summary
    Empty
    Store passwords in a secure way
    Empty
    • Password for existing user must be converted at the next log in or password modification
    • New user must only use the secure password storage
    • Hashed passwords must be kept in one format only
    Empty
    Empty
    Status
    Empty
    Done
    Development
    • [ ] Does it involves User Interface? 
    • [ ] Are there any mockups?
    • [ ] Are permissions checked?
    • [ ] Does it need Javascript development?
    • [x] Does it need a forge upgrade bucket?
    • [ ] Does it need to execute things in system events?
    • [ ] Does it impact project creation (templates)?
    • [ ] Is it exploratory?
    Empty
    Details
    #8059
    Thomas Gerbet (tgerbet)
    2015-06-25 17:28
    2015-05-05 14:51
    8077

    References
    Referencing story #8059

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/25/3925/18' of ssh://gerrit.tuleap.net:29418/tuleap into tuleap-stable-master aea4f437af
    story #8059: Use secure hash function for the storage of password used for web login 4d87f6146d
    Merge commit 'refs/changes/51/4051/2' of ssh://gerrit.tuleap.net:29418/tuleap into tuleap-stable-master 8e155f62f9
    story #8059: Users can change their password on a platform who does not store passwords with MD5 e3732d08ea
    Merge commit 'refs/changes/54/4054/3' of ssh://gerrit.tuleap.net:29418/tuleap into tuleap-stable-master 06be8ff9ee
    story #8059: Users can authenticate to ProFTPD on a platform who does not store MD5 passwords dc7182235e
    Merge commit 'refs/changes/34/4034/6' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 5ef10f8fa5
    story #8059: Use salted SHA-512 instead of salted MD5 to store UNIX passwords 6a76e0c366
    Merge commit 'refs/changes/74/4074/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 49ea3a7e6b
    story #8059: Users can change their password on a platform with the LDAP plugin activated 022668f7b4
    Merge commit 'refs/changes/69/4069/4' of ssh://gerrit.tuleap.net:29418/tuleap into stable aae1577c34
    story #8059: Rename the UserTokenGenerator to RandomNumberGenerator fcc45e9156
    Merge commit 'refs/changes/78/4078/2' of ssh://gerrit.tuleap.net:29418/tuleap into tuleap-stable-master 9777974109
    story #8059: Openfire can authenticate users on platform that does not store password with MD5 5fbc057ba0

    Follow-ups