Le 3/22/13 3:49 PM, Ashma Shrestha a écrit :
> Hi,
>
> Are there any plans on implementing PKCS5S2 Password Hashing?
No. PKCS5 is a patented algorithm, owned by RSA. It's not available in
the JRE.


>  If not can anyone provide me some pointers on how this can be implemented.

The only way would be to add BouncyCastle jar, and to modify the
authenticator to hash the password using PKCS5.

That would require some modifications in the following classes in the
api-ldap-model :
org.apache.directory.api.ldap.model.constants.LdapSecurityConstants
org.apache.directory.api.ldap.model.password.PasswordUtil.encryptPassword()

It should not take too long to implement it.

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com 

Reply via email to