S E C U R I T Y  

hashAlgorithm=string: The name of the java.security.MessageDigest algorithm to 

use to hash the password. There is no default so this option must be specified to 

enable hashing. When hashAlgorithm is specified, the clear text password obtained 

from the CallbackHandler is hashed before it is passed to 

UsernamePasswordLoginModule.validatePassword as the inputPassword argument. 

The expectedPassword as obtained from the database must be comparably hashed.  

hashEncoding=base64|hex: The string format for the hashed pass and must be 

either "base64" or "hex". Base64 is the default. 

hashCharset=string: The encoding used to convert the clear text password to a byte 

array. The platform default encoding is the default 

As an example DatabaseServerLoginModule configuration, consider a custom table schema 

like the following: 

CREATE TABLE Users(username VARCHAR(64) PRIMARY KEY, passwd VARCHAR(64)) 

CREATE TABLE UserRoles(username VARCHAR(64), userRoles VARCHAR(32)) 

The corresponding DatabaseServerLoginModule configuration would be: