Skip to content

GitLab

Closed
Opened by dcoutadeur dcoutadeur@dcoutadeurDeveloper

adding salt feature for database backend

This feature goal is to provide salted hashes for database backend on LemonLDAP::NG.

  • portal authentication: if custom hash scheme is used, Lemon gets the salt in the database (last 8 bytes) then it computes the hashed password: {noformat} encode_base64(SQL_METHOD(password + salt) + salt) {noformat} Note : this algorithm is based on OpenLDAP one.

  • password module: the password creation method must be adapted

  • manager: the interface must propose a binary option: salted / not salted (default)

This feature should be available for 1.9 and 2.0 versions.