mirror of
https://git.openldap.org/openldap/openldap.git
synced 2026-01-06 06:59:54 -05:00
7e3822f3bb
This change implements argon2, which won the Password Hashing Competition (https://password-hashing.net/) as a contrib-module in order to provide a modern password hashing alternative in openldap. The currently available password hashing algorithms are relatively old, and modern hardware, especially GPUs can compute quite a few (ranging from tens of thousands to millions) of hashes per second. Argon2 was designed to withstand such attacks. This implementation uses the default work factors used in the argon2 command line client, but the resulting hashes are stored in a way that would allow retroactive changes to these values, or even exposing them as configuration in the module. |
||
|---|---|---|
| .. | ||
| acl | ||
| addpartial | ||
| adremap | ||
| allop | ||
| allowed | ||
| authzid | ||
| autogroup | ||
| cloak | ||
| comp_match | ||
| denyop | ||
| dsaschema | ||
| dupent | ||
| kinit | ||
| lastbind | ||
| lastmod | ||
| noopsrch | ||
| nops | ||
| nssov | ||
| passwd | ||
| proxyOld | ||
| samba4 | ||
| smbk5pwd | ||
| trace | ||
| usn | ||
| vc | ||
| README | ||
Copyright 2008-2020 The OpenLDAP Foundation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. This directory contains native-API slapd modules (overlays etc): acl (plugins) Plugins implementing access rules. Currently one plugin which implements access control based on posixGroup membership. addpartial (overlay) Treat Add requests as Modify requests if the entry exists. allop (overlay) Return operational attributes for root DSE even when not requested, since some clients expect this. autogroup (overlay) Automated updates of group memberships. cloak (overlay) Hide specific attributes unless explicitly requested comp_match (plugin) Component Matching rules (RFC 3687). denyop (overlay) Deny selected operations, returning unwillingToPerform. dsaschema (plugin) Permit loading DSA-specific schema, including operational attrs. lastbind (overlay) Record the last successful authentication on an entry. lastmod (overlay) Track the time of the last write operation to a database. nops (overlay) Remove null operations, e.g. changing a value to same as before. nssov (listener overlay) Handle NSS lookup requests through a local Unix Domain socket. passwd (plugins) Support additional password mechanisms. Currently Kerberos, Netscape MTA-MD5 and RADIUS. proxyOld (plugin) Proxy Authorization compatibility with obsolete internet-draft. smbk5pwd (overlay) Make the PasswordModify Extended Operation update Kerberos keys and Samba password hashes as well as userPassword. trace (overlay) Trace overlay invocation. usn (overlay) Maintain usnCreated and usnChanged attrs similar to Microsoft AD. $OpenLDAP$