authentication « Glassfish « JSF Q&A

1. Is it possible to use container-managed authentication with password salting?    stackoverflow.com

I know how to set up vanilla container-managed security that uses form authentication and uses digested passwords (say, SHA-256). Something like this:

web.xml

<login-config>
    <auth-method>FORM</auth-method>
    <realm-name>jdbc</realm-name>
  ...

2. Glassfish containter security authentication - how to add salt (j_security_check)    stackoverflow.com

How to add salt when I want to authenticate users using web.xml security (j_username, j_password, j_security_check)? Now, I am using MD5 or SHA256 (configured in Security Realm). Using Glassfish 3.1, Java Server Faces ...