2:51 a.m.
https://bugs.openldap.org/show_bug.cgi?id=9516
Issue ID: 9516
Summary: Argon2 configuration parameters with slappasswd
Product: OpenLDAP
Version: 2.4.58
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: ---
Component: slapd
Assignee: bugs(a)openldap.org
Reporter: gilbert.kowarzyk(a)servicenow.com
Target Milestone: ---
It is currently possible to generate an Argon2 hash using slappasswd as
follows:
slappasswd -h {ARGON2} -o module-load=pw-argon2
However, I believe that it is currently not possible to provide Argon2
configuration values for parameters "m", "t", and "p" when
using slappasswd.
If it is currently possible to provide these config parameters when using
slappasswd, please add documentation for how to do so.
Thanks in advance!
--
You are receiving this mail because:
You are on the CC list for the issue.
9:15 a.m.
New subject: [Issue 9516] Argon2 configuration parameters with slappasswd
https://bugs.openldap.org/show_bug.cgi?id=9516
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Target Milestone|--- |2.6.0
--
You are receiving this mail because:
You are on the CC list for the issue.
9:46 a.m.
New subject: [Issue 9516] Argon2 configuration parameters with slappasswd
https://bugs.openldap.org/show_bug.cgi?id=9516
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|UNCONFIRMED |RESOLVED
Resolution|--- |FIXED
--- Comment #1 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
• 8b353df0
by Ondřej Kuzník at 2021-04-14T18:17:59+01:00
ITS#9517 Add module args support to slappaswd and relevant docs
--
You are receiving this mail because:
You are on the CC list for the issue.
9:46 a.m.
New subject: [Issue 9516] Argon2 configuration parameters with slappasswd
https://bugs.openldap.org/show_bug.cgi?id=9516
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |VERIFIED
Target Milestone|2.6.0 |2.5.4
--
You are receiving this mail because:
You are on the CC list for the issue.
10:24 a.m.
New subject: [Issue 9516] Argon2 configuration parameters with slappasswd
https://bugs.openldap.org/show_bug.cgi?id=9516
--- Comment #2 from Michael Ströder <michael(a)stroeder.com> ---
Stuffing the Argon2 parameters into moduleload directive seems wrong to me.
IMO they should be defined by a config directive similar to
password-crypt-salt-format or cn=config attribute olcPasswordCryptSaltFormat.
Suggested naming:
slapd.conf: password-argon2-params
cn=config: olcPasswordArgon2Params
Syntax of the config values could be the same like in moduleload directive.
--
You are receiving this mail because:
You are on the CC list for the issue.
11:28 a.m.
New subject: [Issue 9516] Argon2 configuration parameters with slappasswd
https://bugs.openldap.org/show_bug.cgi?id=9516
--- Comment #3 from Howard Chu <hyc(a)openldap.org> ---
(In reply to Michael Ströder from comment #2)
Stuffing the Argon2 parameters into moduleload directive seems wrong
to me.
This is how optional params have always been passed to modules since the
support for modules was added in the first place.
--
You are receiving this mail because:
You are on the CC list for the issue.
11:31 a.m.
New subject: [Issue 9516] Argon2 configuration parameters with slappasswd
https://bugs.openldap.org/show_bug.cgi?id=9516
--- Comment #4 from Howard Chu <hyc(a)openldap.org> ---
(In reply to Michael Ströder from comment #2)
Stuffing the Argon2 parameters into moduleload directive seems wrong
to me.
IMO they should be defined by a config directive similar to
password-crypt-salt-format or cn=config attribute olcPasswordCryptSaltFormat.
Suggested naming:
slapd.conf: password-argon2-params
cn=config: olcPasswordArgon2Params
Syntax of the config values could be the same like in moduleload directive.
slappasswd doesn't read any config files, so this suggestion won't work.
--
You are receiving this mail because:
You are on the CC list for the issue.
1:01 a.m.
New subject: [Issue 9516] Argon2 configuration parameters with slappasswd
https://bugs.openldap.org/show_bug.cgi?id=9516
--- Comment #5 from diroots <diroots(a)e.email> ---
(In reply to Howard Chu from comment #3)
(In reply to Michael Ströder from comment #2)
> Stuffing the Argon2 parameters into moduleload directive seems wrong to me.
This is how optional params have always been passed to modules since the
support for modules was added in the first place.
Hello howard,
one question about this possibility to define parameters with olcModuleLoad
what about the possibility to change the params?
as i read elsewhere, and tested, if i use olcModuleLoad a second time to change
the params, i get the "Other (e.g., implementation specific) error (80)" error
--
You are receiving this mail because:
You are on the CC list for the issue.
292
days inactive
800
days old
7 comments
1 participants
participants (1)
-
openldap-its＠openldap.org