upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-23 08:09:34 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add description of {K5KEY} password mech

Browse source
This commit is contained in:
Howard Chu 2005-01-13 19:07:23 +00:00
parent aa913f1bef
commit d74f40b650
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
contrib/slapd-modules/smbk5pwd/README
View file

@ -1,4 +1,4 @@
Copyright 2004 Howard Chu, Symas Corp. All rights reserved.
Copyright 2004-2005 Howard Chu, Symas Corp. All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted only as authorized by the OpenLDAP
@ -15,7 +15,12 @@ password hashes for an LDAP user.
The Kerberos support is written for Heimdal using its hdb-ldap backend.
If a PasswordModify is performed on an entry that has the krb5KDCEntry
objectclass, then the krb5Key and krb5KeyVersionNumber will be updated
using the new password in the PasswordModify request.
using the new password in the PasswordModify request. Additionally, a
new "{K5KEY}" password hash mechanism is provided. krb5KDCEntries that
have this hash specifier in their userPassword attribute, Simple Binds
will be checked against the Kerberos keys of the Entry. No data is
needed after the "{K5KEY}" hash specifier in the userPassword, it is
looked up from the Entry directly.
The Samba support is written using the Samba 3.0 LDAP schema. If a
PasswordModify is performed on an entry that has the sambaSamAccount