openldap-pbkdf2 | PBKDF2 for OpenLDAP | Identity Management library

by hamano C Version: Current License: No License

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | openldap-pbkdf2 Summary

openldap-pbkdf2 is a C library typically used in Security, Identity Management applications. openldap-pbkdf2 has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

openldap-pbkdf2

Support

Quality

Security

License

Reuse

Support

openldap-pbkdf2 has a low active ecosystem.

It has 31 star(s) with 7 fork(s). There are 5 watchers for this library.

It had no major release in the last 6 months.

There are 4 open issues and 7 have been closed. On average issues are closed in 60 days. There are 1 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of openldap-pbkdf2 is current.

Quality

openldap-pbkdf2 has no bugs reported.

Security

openldap-pbkdf2 has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

openldap-pbkdf2 does not have a standard license declared.

Check the repository for any license declaration and review the terms closely.

Without a license, all rights are reserved, and you cannot use the library in your applications.

Reuse

openldap-pbkdf2 releases are not available. You will need to build from source code and install.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of openldap-pbkdf2

Get all kandi verified functions for this library.

openldap-pbkdf2 Key Features

No Key Features are available at this moment for openldap-pbkdf2.

openldap-pbkdf2 Examples and Code Snippets

No Code Snippets are available at this moment for openldap-pbkdf2.

Community Discussions

Trending Discussions on openldap-pbkdf2

Migrating users from Keycloak to LDAP with passwords intact

QUESTION

Migrating users from Keycloak to LDAP with passwords intact

Asked 2019-Jun-25 at 12:51

We currently have a Keycloak realm where we want to export all existing users into LDAP (with their passwords intact), so we can add login support for other locations that don't support OpenID Connect or SAML, but do support LDAP.

Given that password credentials are stored in the Keycloak MySQL user database using the pbkdf2-sha256 algorithm, I had to use OpenLDAP 2.4.47 with the contrib modules to support this on the LDAP side as well (I also believe I've enabled this module in the configuration).

I'm having trouble transferring the existing has (from Keycloak) to LDAP using the format described here: https://github.com/hamano/openldap-pbkdf2

Forgive me for using PHP, but it's the programming language I'm most comfortable with at this time.

I've tried using the HASH_ITERATIONS, SALT, and VALUE fields, along with the base64url_encode custom function provided in the comments under base64_encode in the PHP manual, to make an "Adapted Base64" string, and provide the built string as the userPassword field when creating an LDAP user. The user is successfully created in LDAP, but I'm unable to authenticate against LDAP using the credentials for the user I've just created.

...

ANSWER

Answered 2019-Jun-25 at 12:51

Quick update: I managed to find a solution together with one of my excellent colleagues, and I wanted to post the solution here, for future reference if anyone else get stuck on this.

We found out that the key length used for hashing in Keycloak was 64 bytes, no matter which algorithm was used. This also meant that the byte sequence of the hash is repeated for those algorithms that have a default key length that is shorter than 64 bytes (to make it exactly 64 bytes long). In PBKDF2, the default key length for SHA-1 is 20 bytes, it's 32 bytes for SHA-256, and 64 bytes for SHA-512. This allowed me to make the following PHP function that returns the exact same type of string returned by slappasswd:

Source https://stackoverflow.com/questions/56703883

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install openldap-pbkdf2

You can download it from GitHub.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: