directory-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Seelmann <>
Subject Re: [ApacheDS] Bind problems
Date Fri, 12 Jun 2009 14:48:16 GMT
> {SSHA}0TT388zsWzHKtMEpIU/8/W68egchNEWp
> clear text: test123
> Verify works, bind does not.

Some investigations :

When decoding this password (base64) it is 24 bytes long: 20 byte the
SHA-1 hash of the password and 4 byte the salt.

slappasswd creates SSHA password with 4 byte salt.

Studio creates SSHA passwords with 8 byte salt

ApacheDS bind operation only works with a 8 byte salt.

The Studio veryify operation works with both.

I haven't found a definite receipe how many byte of salt a SSHA password
should contain. Any reference would be welcome.

Kind Regards,

View raw message