Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted.

Creating a LDIF file with a string "{MD5}contents" gives me no errors but I don't know how to retrieve this information once it's stored.

Any help?

share|improve this question
    
The LDAP server needs to be aware of hashed passwords because it must be able to recompute the hash to authenticate users with it. Unless your LDAP server needs to do blind validation of said email field, why would it have to care about hashing ? that should be handled by the application. –  b0fh Sep 21 '12 at 17:13
add comment

1 Answer

Data can be stored in any format that is allowed by the attribute description. userpassword and authpassword syntaxes are described in RFC3112. How the directory server stores data varies according to the data and the attribute description in the schema, but there is no reason why data cannot be stored in any format that is allowed by the attribute description. Depending on the data, the server might base64-encode the data, but that's irrelevant as far as the client is concerned.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.