Re: Schema: encrypted 8-bit userPassword and SASLprep

[Michael Ströder <michael@stroeder.com>]

Hallvard B Furuseth wrote:
> [Schema] 2.41 (userPassword) says:
>
>    The application SHOULD prepare textual strings used as passwords
>    by transcoding them to Unicode, applying SASLprep [SASLprep], and
>    encoding as UTF-8.
>
> This is incompatible with passwords written in 8-bit character sets and
> stored encrypted in files that cannot easily be decrypted, e.g. Unix
> /etc/passwd files.  Since the server does not know the plaintext
> passwords, it cannot prepare them as above.

IMHO the password should be encoded as UTF-8 before applying the hash. Maybe 
the wording is somewhat misleading though I'm not sure.

Note that hashed passwords are non-standard anyway... ;-)

Ciao, Michael.