[DOCS] Add configurable password hashing docs #32849
Conversation
Adds documentation about the newly introduced configuration option for setting the password hashing algorithm to be used for the users cache and for storing credentials for the native and file realm.
jkakavas
added
>docs
|
Pinging @elastic/es-security |
|
I think it makes sense for the hash algorithm lists appear in the security settings page instead of the Stack Overview. I've made that change in 74048ff |
|
The new password-hashing.asciidoc file isn't included in either the Stack Overview or the Elasticsearch Reference at this point. I actually recommend removing it. I put the gist of that information in a note in the configuring-native-realm.asciidoc and configuring-file-realm.asciidoc pages instead. If you think the concept of password hashing should be covered in the Stack Overview after all, let me know and I can add that page to the table of contents, but as it is, I think the password-hashing.asciidoc file should just be deleted. |
Agreed. I think everything is covered in security-hash-settings.asciidoc and your additions to the configuring-X-realm.asciidoc. Thank you @lcawl |
| ==== User cache and password hash algorithms | ||
|
|
||
| Certain realms store user credentials in memory. To limit exposure | ||
| to credential theft and mitigate credential compromise, cached user credentials |
There was a problem hiding this comment.
maybe To limit exposure to credential theft and mitigate credential compromise, the cache only stored a hashed version of the user credentials
There was a problem hiding this comment.
👍 Thanks, I like that better too, made relevant changes to configuring-{native,file}-realm.asciidoc
* [DOCS] Add configurable password hashing docs Adds documentation about the newly introduced configuration option for setting the password hashing algorithm to be used for the users cache and for storing credentials for the native and file realm.
Adds documentation about the newly introduced configuration option for setting the password hashing algorithm to be used for the users cache and for storing credentials for the native and file realm.
Adds documentation about the newly introduced configuration option
for setting the password hashing algorithm to be used for the users
cache and for storing credentials for the native and file realm.