Additional Configuration for MKS Domain Security Scheme
For enhanced security, user passwords in MKS Domain are stored in a hashed format. The following table lists the configurable properties for the MKS Domain security scheme. Using these properties, you can configure security of the hashed passwords to the desired level. Add the properties to the is.properties file before server startup. If you type any invalid values, the server does not start and an appropriate error message is logged in the server log.
 |
You must configure these values before the server starts. If you modify any value after server startup, authentication errors for existing MKS Domain users may occur. Correcting the authentication errors may require database-related changes, re-creation and change of password operations for the affected users.
|
|
Property
|
Description
|
Valid Values
|
|---|---|---|
|
mksis.mksdomain.hashingAlgorithm
|
Hashing algorithm used for generating the password hash
|
Specify any one of the following values:
PBKDF2WithHmacSHA1
PBKDF2WithHmacSHA224
PBKDF2WithHmacSHA256
PBKDF2WithHmacSHA384
PBKDF2WithHmacSHA512
If no value is specified, the default hashing algorithm used is PBKDF2WithHmacSHA512.
|
|
mksis.mksdomain.hashLengthBytes
|
Length of the hash to be generated (in bytes)
|
Specify a value between 16 and 256.
If no value is specified, the default length of the hash is 64 bytes.
|
|
mksis.mksdomain.saltLengthBytes
|
Length of the salt value used for password hashing (in bytes)
|
Specify a value between 16 and 256.
If no value is specified, the default length of the salt value is 64 bytes.
|
|
mksis.mksdomain.iterations
|
Number of iterations used by the hashing algorithm to generate the hash
|
Specify a value greater than 1000.
If no value is specified, the default number of iterations is 100000.
|