Issue #699 has been updated by alex p.

Clément OUDOT wrote:
> Thanks for the submission.
> 
> I am not sure it is a really important need. For which reason would you keep 
> different storage schemes in your directory?

I have separate accounts that are used by different authentication protocols so 
if I store all passwords in ssha I will not be able to use mschap 
authentication protocol because they are incompatible. So I store almost all 
passwords in ssha, but mschap accounts with cleartext.



----------------------------------------
Feature #699: set hash type based on stored password
http://tools.lsc-project.org/issues/699

Author: alex p
Status: New
Priority: Normal
Assigned to: 
Category: Self Service Password
Target version: self-service-password-?


It's sometimes useful to set hash type based on the stored password (i.e. some 
passwords stored in cleartext, some in ssha).
When stored password is cleatext it will be cleartext after changing, and if it 
is ssha it would be ssha after changing.

In the code it would be something like this:

@   
    $searchUserPass = 
ldap_search($ldap,$userdn,"(objectClass=*)",array("userPassword")) or 
die("error");
    $storedHash = ldap_get_values($ldap, 
ldap_first_entry($ldap,$searchUserPass), "userPassword");

    if (strpos(strtolower($storedHash[0]),"{".strtolower($hash)."}") === false) 
{
        $hash = "clear";
    }
@




-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://tools.lsc-project.org/my/account
_______________________________________________
ltb-dev mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-dev

Reply via email to