On 4/22/20 8:01 PM, Howard Chu wrote: > Michael Ströder wrote: >> On 4/22/20 6:15 PM, Quanah Gibson-Mount wrote: >>> Are there any contrib modules that we should consider promoting to >>> mainline for the 2.5 series? I.e., sha2, argon2 seem like potential >>> options. >> >> +1 for pw-sha2 and pw-argon2. > > sha2 is already obsolete, for password purposes. I see no reason to promote > it.
Yes, SHA-2 is really weak. But moving pw-sha2 into mainline is *not* promoting it. I see some use when migrating from other LDAP servers. Ciao, Michael.