Standard LDAP Password Encryption

retsamedoc - September 17, 2009 - 22:00
Project:LDAP integration
Version:6.x-1.0-beta1
Component:Code
Category:feature request
Priority:critical
Assigned:retsamedoc
Status:needs review
Description

This patch adds more flexibility to the password encryption feature.

The old mechanism would only write cleartext or MD5 password hashes back to LDAP wherein this new method handles many more encryption types like salted hashes and SHA. It does check to see if these additional encryption types are supported by PHP at configuration time.

The patch includes a database update (currently number 6003) that renames the "encrypted" column to "enc_type" to better reflect the data stored. Also, the old values of the column were not remapped to keep disruption at a minimum ( '0' = clear, '1' = MD5).

Tested with D6.14 and OpenLDAP.

AttachmentSize
ldap_integration-encryption.patch12.7 KB
 
 

Drupal is a registered trademark of Dries Buytaert.