Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add RFC 2307 hash detection support to --hash #28

Open
rixvet opened this issue Feb 2, 2022 · 1 comment
Open

Add RFC 2307 hash detection support to --hash #28

rixvet opened this issue Feb 2, 2022 · 1 comment
Labels
enhancement New feature or request

Comments

@rixvet
Copy link
Member

rixvet commented Feb 2, 2022

https://datatracker.ietf.org/doc/html/rfc2307

RFC 2307 (Experimental) suggests user passwords be hashed using a one-way (hopefully) cryptographically safe algorithm. They are often referred to as being "encrypted", but this is a misnomer (as they are not designed to be decrypted).

OpenLDAP supports RFC 2307 hashed passwords, including the {CRYPT}, {SSHA}, {SHA}, {SMD5}, {MD5}, and other schemes. Such passwords may be used as userPassword values and/or rootpw value.

Note: use of RFC 2307 Experimental passwords violates the Standard Track specification, RFC 2256, for user passwords and may lead to interoperability problems. 

https://www.openldap.org/faq/data/cache/346.html

@zyronix
Copy link
Collaborator

zyronix commented Feb 17, 2022

For this hash type you mean something like:
{md5}5f4dcc3b5aa765d61d8327deb882cf99?

If not, could you give some examples?

@zyronix zyronix added the enhancement New feature or request label Feb 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants