[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/conf/audit-system.xml

[noreply at shibboleth.net]

Author: scantor
Date: Thu Nov  5 15:28:52 2015
New Revision: 7946

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7946&view=rev
Log:
IDP-840 - Block unsalted hashed usernames

Modified:
    trunk/idp-conf/src/main/resources/system/conf/audit-system.xml

Modified: trunk/idp-conf/src/main/resources/system/conf/audit-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/audit-system.xml?rev=7946&r1=7945&r2=7946&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/audit-system.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/conf/audit-system.xml	Thu Nov  5 15:28:52 2015
@@ -28,7 +28,8 @@
     <bean id="shibboleth.UsernameHasher" class="com.google.common.base.Functions" factory-method="compose">
         <constructor-arg name="g">
             <bean class="net.shibboleth.utilities.java.support.codec.StringDigester"
-                c:algorithm="#{'%{idp.fticks.algorithm:SHA-256}'.trim()}" c:format="HEX_LOWER" p:salt="%{idp.fticks.salt:undefined}" />
+                c:algorithm="#{'%{idp.fticks.algorithm:SHA-256}'.trim()}" c:format="HEX_LOWER"
+                p:salt="%{idp.fticks.salt:}" p:requireSalt="true" />
         </constructor-arg>
         <constructor-arg name="f">
             <bean class="com.google.common.base.Functions" factory-method="compose">