diff options
| author | Eli Collins <elic@assurancetechnologies.com> | 2011-04-25 01:47:23 -0400 |
|---|---|---|
| committer | Eli Collins <elic@assurancetechnologies.com> | 2011-04-25 01:47:23 -0400 |
| commit | 977766c0f1612d41233d1708aedd68909e968d05 (patch) | |
| tree | 47ee86b9d43f1941a049b2cb424914cf57ae05aa /docs/lib | |
| parent | d4e81a6e9e86bd648c451dcf034440de5351d573 (diff) | |
| download | passlib-977766c0f1612d41233d1708aedd68909e968d05.tar.gz | |
added support for ldap {CRYPT} handlers, using PrefixWrapper to wrap base handlers
Diffstat (limited to 'docs/lib')
| -rw-r--r-- | docs/lib/passlib.apps.rst | 11 | ||||
| -rw-r--r-- | docs/lib/passlib.hash.ldap_digests.rst | 17 |
2 files changed, 24 insertions, 4 deletions
diff --git a/docs/lib/passlib.apps.rst b/docs/lib/passlib.apps.rst index 84b985b..2ee37b4 100644 --- a/docs/lib/passlib.apps.rst +++ b/docs/lib/passlib.apps.rst @@ -43,8 +43,12 @@ Custom Applications have grown beyond it, it is recommended to create your own CryptContext instance; the configuration used to create this object can be a good starting point. +.. _ldap-contexts: + LDAP ==== +Passlib provides two contexts related to ldap hashes: + .. data:: ldap_context This object provides a pre-configured :class:`!CryptContext` instance @@ -61,9 +65,12 @@ LDAP >>> ldap_context.encrypt("password") '{SMD5}T9f89F591P3fFh1jz/YtW4aWD5s=' - .. warning:: +.. data:: ldap_nocrypt_context + + This object recognizes all the standard ldap schemes that :data:`!ldap_context` + does, *except* for the ``{CRYPT}``-based schemes. - PassLib does not currently support the ``{CRYPT}`` password hash method. +.. _mysql-contexts: MySQL ===== diff --git a/docs/lib/passlib.hash.ldap_digests.rst b/docs/lib/passlib.hash.ldap_digests.rst index 103129e..1f5fabd 100644 --- a/docs/lib/passlib.hash.ldap_digests.rst +++ b/docs/lib/passlib.hash.ldap_digests.rst @@ -9,10 +9,12 @@ used by LDAP, as stored in the :rfc:`2307` format. This includes ``{MD5}``, ``{SMD5}``, ``{SHA}``, ``{SSHA}``. Many of these schemes are somewhat to very insecure, and should not be used except when required. +The ``{CRYPT}`` scheme is supported by individual handlers +for each underlying crypt algorithm. -.. note:: +.. seealso:: - The ``{CRYPT}`` scheme is not yet supported by PassLib. + :mod:`!passlib.apps` for a :ref:`list of premade ldap contexts <ldap-contexts>`. Usage ===== @@ -45,6 +47,17 @@ Interface .. autoclass:: ldap_salted_sha1() .. autoclass:: ldap_plaintext() +As well, passlib supports the following `{CRYPT}` schemes, +which wrap their respective underlying unix crypt scheme: + +.. class:: ldap_des_crypt() +.. class:: ldap_bsdi_crypt() +.. class:: ldap_md5_crypt() +.. class:: ldap_bcrypt() +.. class:: ldap_sha1_crypt() +.. class:: ldap_sha256_crypt() +.. class:: ldap_sha512_crypt() + .. rst-class:: html-toggle Format & Algorithm |