Skip to content
GitLab
Explore
Sign in
Register
Primary navigation
Search or go to…
Project
O
OpenLDAP
Manage
Activity
Members
Labels
Plan
Wiki
Bugzilla
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Locked files
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package Registry
Container Registry
Model registry
Operate
Environments
Terraform modules
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Code review analytics
Insights
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
openldap
OpenLDAP
Commits
993d7c4a
Commit
993d7c4a
authored
1 year ago
by
Ondřej Kuzník
Committed by
Quanah Gibson-Mount
1 year ago
Browse files
Options
Downloads
Patches
Plain Diff
ITS
#10037
Update argon2 README
parent
9c18a53a
No related branches found
Branches containing commit
No related tags found
Tags containing commit
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
servers/slapd/pwmods/README.argon2
+6
-18
6 additions, 18 deletions
servers/slapd/pwmods/README.argon2
with
6 additions
and
18 deletions
servers/slapd/pwmods/README.argon2
+
6
−
18
View file @
993d7c4a
...
...
@@ -15,28 +15,16 @@ Both hash the password "secret", the first using the salt "saltsalt", the second
Building
--------
1) Customize the OPENLDAP variable in Makefile to point to the OpenLDAP
source root.
For initial testing you might also want to edit DEFS to define
SLAPD_ARGON2_DEBUG, which enables logging to stderr (don't leave this on
in production, as it prints passwords in cleartext).
2) Run 'make' to produce argon2.so
3) Copy argon2.so somewhere permanent.
4) Edit your slapd.conf (eg. /etc/ldap/slapd.conf), and add:
moduleload ...path/to/argon2.so
5) Restart slapd.
This module is now part of regular OpenLDAP build process and enabled if
libsodium or libargon2 library and the corresponding development headers are
present. You can also choose the library to build against if you prefer by
passing --enable-argon2=<libsodium|libargon2> to your configure invocation.
Configuring
-----------
The {ARGON2} password scheme should now be recognised.
Load the argon2 module (e.g. with olcModuleLoad or moduleload) and the
{ARGON2} password scheme should now be recognised.
You can also tell OpenLDAP to use one of this scheme when processing LDAP
Password Modify Extended Operations, thanks to the password-hash option in
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment