[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: RFC2256: userPassword
I also do not think you can make the assumption that passwords are nver
read. It is possible that some applications may do that. Hence, a one-way
hash won't work.
Cheers, ....Erik.
------------------------------------
Erik Skovgaard
GeoTrain Corp.
Directory Design and Deployment
http://www.geotrain.com
At 09:46 99/06/30 +0200, Helmut Volpers wrote:
>David,
>
>David Boreham wrote:
>>
>> Paul Collins wrote:
>>
>> > Why are they world-readable in the first place? I figured authentication
>>
>> They aren't. It's a philisophical position that they
>> can be read, somehow. This is why we use one-way
>> hashes for passwords rather than storing cleartext.
>
>How do you replicate one-way hashed passwords to any other server ?
>Can you make a LDIF dump (for backup) and load the data to another
>server ?
>
>Is the question really how to store it in the server ? the question is
>how
>the password goes over the wire.
>
>Helmut
>Attachment Converted: "d:\Program Files\Eudora\Attach\helmut.volpers.vcf"
>