Authentication Schemes Supported in Comparison Mode
When comparison mode is in use, the following LDAP server password hash/encryption schemes are supported:
|
Scheme |
Format |
Description |
Algorithm |
Notes |
|
{SCHEME}Hash |
|
UNIX crypt |
Calculate hash from the clear text password based on algorithm and compare with password digest |
Supported by OpenLDAP |
|
|
|
SHA hashing algorithm followed by the hash |
|
|
|
|
|
Clear text password |
|
|
|
{SCHEME}Hash(passwd+seed) |
|
Seeded SHA hashing algorithm with the first 6 chars as the seed |
Calculate the seed from the hash and calculate hash based on the clear text + salt |
|
|
PAM MD5 |
|
Password hash in |
|
|
|
Apache MD5 |
|
|
|
|
|
Clear Text |
|
clear text password in octet string, specified in rfc2256 |
String comparison |
Must not be used |