You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "SPChan (JIRA)" <ji...@apache.org> on 2019/05/23 02:36:00 UTC
[jira] [Commented] (DIRSTUDIO-1226) Cannot verify PBKDF2_SHA256
passwords
[ https://issues.apache.org/jira/browse/DIRSTUDIO-1226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16846380#comment-16846380 ]
SPChan commented on DIRSTUDIO-1226:
-----------------------------------
Possibly this is some non-standard 389-DS format for hashed password. Feel free to close if that is the case.
> Cannot verify PBKDF2_SHA256 passwords
> -------------------------------------
>
> Key: DIRSTUDIO-1226
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-1226
> Project: Directory Studio
> Issue Type: Bug
> Reporter: SPChan
> Priority: Major
> Fix For: 2.0.0-M14
>
>
> For userPassword stored as PBKDF2_SHA256:
> Edit Value -> Verify Password -> (enter password) -> Verify fails.
> Edit Value -> Verify Password -> (enter password) -> Bind works.
>
> The format of the stored password is from 389-DS:
> {PBKDF2_SHA256}<hashed_data: 324 bytes as base64>
>
> hashed_data = iteration_count: 4 bytes (integer, network order) , salt: 64 bytes, hash: 256 bytes
> generated using PBKDF2 HMAC-SHA256
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)