November 2017
Intermediate to advanced
542 pages
14h 24m
English
LDAP has general support for a variety of password encoding algorithms, ranging from plaintext to one-way hash algorithms—similar to those we explored in the previous chapter—with database-backed authentication. The most common storage formats for LDAP passwords are SHA (SHA-1 one-way hashed), and SSHA (SHA-1 one-way hashed with a salt value). Other password formats often supported by many LDAP implementations are thoroughly documented in RFC 2307, An Approach to Using LDAP as a Network Information Service (http://tools.ietf.org/html/rfc2307). The designers of RFC 2307 did a very clever thing with regards to password storage. Passwords retained in the directory are, of course, encoded with whatever algorithm ...
Read now
Unlock full access