[DIRSTUDIO-1226] Cannot verify PBKDF2_SHA256 passwords

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: SPChan
• Created: 23/May/19 02:33
• Updated: 21/Feb/21 10:53

Description

For userPassword stored as PBKDF2_SHA256:

Edit Value -> Verify Password -> (enter password) -> Verify fails.

Edit Value -> Verify Password -> (enter password) -> Bind works.

 

The format of the stored password is from 389-DS:

{PBKDF2_SHA256}

<hashed_data: 324 bytes as base64>

 

hashed_data = iteration_count: 4 bytes (integer, network order) , salt: 64 bytes, hash: 256 bytes

generated using PBKDF2 HMAC-SHA256