Details

    • Type: New Feature New Feature
    • Status: Closed
    • Severity: High High
    • Resolution: Fixed
    • Affects Version/s: 4.1.2
    • Fix Version/s: 5.1.0 GA
    • Component/s: API
    • Labels:
    • Notice:
      When an issue is open, the "Fix Version/s" field conveys a target, not necessarily a commitment. When an issue is closed, the "Fix Version/s" field conveys the version that the issue was fixed in.

      Description

      At this time passwords are stored only obfuscated. There is a need for a strong encryption e.g. via calling a custom Java class in a plugin (plug-in security provider with encryption).

        Issue Links

          Activity

          Hide
          Matt Casters added a comment - - edited

          As there is only 1 entry class (Encr) this shouldn't be too hard to do.

          Show
          Matt Casters added a comment - - edited As there is only 1 entry class (Encr) this shouldn't be too hard to do.
          Show
          Jens Bleuel added a comment - See also http://wiki.pentaho.com/display/EAI/Security+Considerations+and+Encryption+with+Kettle
          Hide
          Jens Bleuel added a comment -

          We may consider using PBKDF2 for storing passwords.

          Show
          Jens Bleuel added a comment - We may consider using PBKDF2 for storing passwords.
          Hide
          Jens Bleuel added a comment -

          We may think at least offering a plug-in option here.

          Show
          Jens Bleuel added a comment - We may think at least offering a plug-in option here.
          Hide
          Jens Bleuel added a comment -

          Closing as fixed in 5.1 as part of PDI-10567 and PDI-10642.
          Follow up with hardening: PDI-12502

          Show
          Jens Bleuel added a comment - Closing as fixed in 5.1 as part of PDI-10567 and PDI-10642. Follow up with hardening: PDI-12502

            People

            • Assignee:
              Unassigned
              Reporter:
              Jens Bleuel
            • Votes:
              2 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: