[SOLR-11279] It is necessary to specify how to generate a password when used Basic Authentication!

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.3.1
• Fix Version/s: 8.0
• Component/s: Authentication, documentation
• Labels: documentation security
• Assignee: Unassigned
• Reporter: chenmin
• Created: 23/Aug/17 01:54
• Updated: 08/Jun/19 15:20
• Resolved: 26/Dec/18 06:46

Description

Follow the documentation ,"Usernames and passwords (as a sha256(password+salt) hash) could be added when the file is created.

Actually, I do not know how to generate a password.
Finding code as:

public static String getSaltedHashedValue(String pwd)

{ final Random r = new SecureRandom(); byte[] salt = new byte[32]; r.nextBytes(salt); String saltBase64 = Base64.encodeBase64String(salt); String val = sha256(pwd, saltBase64) + " " + saltBase64; return val; }

I think we shoud give an example to generate password in ref guide!