[Building Sakai] user accounts with no passwords

[Steve Swinsburg]

I had a brief look at OpenAuthnComponent and its not really what I'm  
after as it changes how the username/password are used for accounts  
(ie password is used as the userId) and I still need to type something  
in the other box.

Ideally I want to be able to type a username and that is it, and it  
works as normal.

So I've modified a couple of UserAuthnComponent,  
BaseUserDirectoryService and LoginTool methods to check a sakai  
property called 'developmentMode'. If its true then passwords aren't  
checked. It seems to be working perfectly. Of course this is totally  
insecure but I'll add a big message to the portal as well.

Tracking via this Jira:
http://jira.sakaiproject.org/jira/browse/SAK-15827


cheers,
Steve

---
Steve Swinsburg
Portal Systems Developer
Centre for e-Science
Lancaster University
Lancaster
LA1 4YT

email: s.swinsburg at lancaster.ac.uk
phone: +44 (0) 1524 594870







On 10 Mar 2009, at 14:38, Matthew Buckett wrote:

> On Tue, Mar 10, 2009 at 2:18 PM, Steve Swinsburg
> <s.swinsburg at lancaster.ac.uk> wrote:
>>
>> User Accounts can be created with no passwords (via Admin New User  
>> tool),
>> and I've read Jira tickets that say its meant to be in there and  
>> there is a
>> use case etc, but how does one login with no password after this  
>> account is
>> created? No password would be useful for development and logging in  
>> under
>> different accounts - is there a sakai property I can set that allow  
>> me to
>> login with no password?
>
> I don't think so easily as:
>
> org.sakaiproject.user.impl.UserAuthnComponent.authenticate(Evidence)
>
> Doesn't allow logins with empty password. I have noticed that there  
> exists:
>
> org.sakaiproject.user.impl.OpenAuthnComponent
>
> which you could register in spring as being the authentication
> manager, but I've never tried this.
>
>
> -- 
>  Matthew Buckett

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20090310/acc89ae9/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2437 bytes
Desc: not available
Url : http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20090310/acc89ae9/attachment.bin