directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kiran Ayyagari (JIRA)" <j...@apache.org>
Subject [jira] Assigned: (DIRSERVER-1466) Support SHA-256 for userPassword values
Date Thu, 25 Feb 2010 15:21:27 GMT

     [ https://issues.apache.org/jira/browse/DIRSERVER-1466?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Kiran Ayyagari reassigned DIRSERVER-1466:
-----------------------------------------

    Assignee: Kiran Ayyagari

> Support SHA-256 for userPassword values
> ---------------------------------------
>
>                 Key: DIRSERVER-1466
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1466
>             Project: Directory ApacheDS
>          Issue Type: Improvement
>          Components: core
>    Affects Versions: 1.5.5
>         Environment: ApacheDS 1.5.5
>            Reporter: Stefan Zoerner
>            Assignee: Kiran Ayyagari
>            Priority: Minor
>             Fix For: 1.5.6
>
>
> Currently, ApacheDS 1.5.5 authenticates users with passwords stored with following algorithms:
> * (plain text)
> * SHA
> * SSHA
> * MD5
> * SMD5
> * CRYPT
> see class org.apache.directory.server.core.authn.SimpleAuthenticator and enum org.apache.directory.shared.ldap.constants.LdapSecurityConstants.
> Most of them are considered weak. http://www.schneier.com/essay-074.html
> SHA-256 is not directly supported. How about adding it to the list?

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message