Re: Double variable expansion / multiple password mechanisms

2016-06-17 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 14 Jun 2016, Leon Kyneur wrote: For each user Store supported password schemes as LDAP attributes: userPasswordCRAM-MD5: {CRAM-MD5}xxx userPasswordDIGEST-MD5: {DIGEST-MD5} userPasswordSCRAM: {SCRAM-SHA-1} userPasswordNTLM:

Re: Double variable expansion / multiple password mechanisms

2016-06-14 Thread Leon Kyneur
On 14/06/16 23:15, Karsten Heiken wrote: Hi Leon, You should be able to add multiple userPassword attributes to your directory: userPassword: {CRAM-MD5}xxx userPassword: {DIGEST-MD5} userPassword: {SCRAM-SHA-1} userPassword: {NTLM} Did try this, didn't end end well. Jun 14

Re: Double variable expansion / multiple password mechanisms

2016-06-14 Thread Karsten Heiken
Hi Leon, >> You should be able to add multiple userPassword attributes to your directory: >> >> userPassword: {CRAM-MD5}xxx >> userPassword: {DIGEST-MD5} >> userPassword: {SCRAM-SHA-1} >> userPassword: {NTLM} > > Did try this, didn't end end well. > > Jun 14 12:59:43 auth: Error: >

Re: Double variable expansion / multiple password mechanisms

2016-06-14 Thread Leon Kyneur
Hi Karsten, You should be able to add multiple userPassword attributes to your directory: userPassword: {CRAM-MD5}xxx userPassword: {DIGEST-MD5} userPassword: {SCRAM-SHA-1} userPassword: {NTLM} Karsten Did try this, didn't end end well. Jun 14 12:59:43 auth: Error:

Re: Double variable expansion / multiple password mechanisms

2016-06-14 Thread Karsten Heiken
Hi Leon, > I had the crazy thought I could do something like the following: > > For each user Store supported password schemes as LDAP attributes: > userPasswordCRAM-MD5: {CRAM-MD5}xxx > userPasswordDIGEST-MD5: {DIGEST-MD5} > userPasswordSCRAM: {SCRAM-SHA-1} > userPasswordNTLM:

Double variable expansion / multiple password mechanisms

2016-06-14 Thread Leon Kyneur
Hi, Trying to solve the problem of supporting multiple auth mechanisms + proxy and really don't want to store user passwords in plain test and fine to do master user to backend. I had the crazy thought I could do something like the following: For each user Store supported password schemes