feature request: support for salted sha512/sha256 passwords via crypt(3) about phpldapadmin HOT 4 CLOSED

+1

from phpldapadmin.

I need it too. I wonder if phpLDAPAdmin could implement a feature to use the LDAP Password Modify Extended Operation? This way, a default hash method and salt could be configured in LDAP server (e.g. olcPasswordHash, olcPasswordCryptSaltFormat) and PHPLDapAdmin could work by just delegating password hashing to LDAP.

update: a quick googling suggests that RFC 3062 is not available from PHP.

from phpldapadmin.

#42 shall fix this.

from phpldapadmin.

The fix adds sha256crypt and sha512crypt to the encryption pull down menu but when modifying an existing user crypt is always preselected. In order to preselect sha256crypt or sha512crypt when they are used I added these two elseif cases to function get_enc_type in lib/functions.php:

function get_enc_type($user_password) {
    ...
    # Handle crypt types
    if (strcasecmp($enc_type,'crypt') == 0) {
        ...
        elseif (preg_match('/{[^}]+}\\$5\\$+/',$user_password))
            $enc_type = 'sha256crypt';

        elseif (preg_match('/{[^}]+}\\$6\\$+/',$user_password))
            $enc_type = 'sha512crypt';

from phpldapadmin.