Basic authentication in FIS.cfg
Basic authentication requires the HTTPS protocol, which is defined in the beginning of the configuration file (also see Connection settings – IP and port configuration in FIS.cfg). This kind of authentication is based on user credential settings as illustrated below:
…
protocol=https
…
######################
# basic authentication
######################
# Credentials for basic authentication against ImageMaster
# With basic authentication a trust store can be set
# by the trust-store parameters.
# the user's login name
basicauth.user=
# the user's password
basicauth.password=
The basic authentication credentials refer to an ImageMaster user account, which must be created via the AdminClient, see User, role, and group maintenance in [UM AdminClient] or via the Administration web services. The user must have enough permissions according to the FIS roles listed in chapter Permission prerequisites.
Password encryption
Set this property to true if the passwords stored in this file are encrypted # Encryption is related to the following properties: # basicauth.password, keystore.pw, trustedKeystore.pw # Note: usage of setting 'encrypted=false' is deprecated and will not be supported in future releases. # It is recommended to use encrypted passwords. encrypted=true
It is recommended that you activate encrypted passwords because plaintext passwords are deprecated and will not be supported any longer in future releases.
To encrypt the passwords, you need to activate the encryption mode.
To invoke the mode, use the command "FIS -e" or "FIS --encrypt".
When the encryption mode is started, enter the password to be encrypted. The password is then encrypted using an AES algorithm with keysize 256 and the encrypted password is displayed to the user. In encryption mode several passwords can be encrypted successively. To stop entering passwords and exit the mode, the user can type 'exit' or press Ctrl + C.
When starting the encryption mode the properties that can be encrypted are listed. The following properties are supported: basicauth.password, keystore.pw, trustedKeystore.pw.