blob: cded54a2adbee1a29daa7ce341731f9a189b2b9b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
===========================================================
:samp:`passlib.hash.ldap_{crypt}` - LDAP crypt() Wrappers
===========================================================
.. currentmodule:: passlib.hash
Passlib provides support for all the standard
LDAP hash formats specified by :rfc:`2307`.
One of these, identified by RFC 2307 as the ``{CRYPT}`` scheme,
is somewhat different from the others.
Instead of specifying a password hashing scheme,
it's supposed to wrap the host OS's :func:`!crypt()`.
Being host-dependant, the actual hashes supported
by this scheme may differ greatly between host systems.
In order to provide uniform support across platforms,
Passlib defines a corresponding :samp:`ldap_{xxx}_crypt` scheme
for each of the :ref:`standard unix hashes <standard-unix-hashes>`.
.. seealso::
* :doc:`passlib.hash.ldap_std` - the other standard LDAP hashes.
* :mod:`!passlib.apps` for a :ref:`list of premade ldap contexts <ldap-contexts>`.
Usage
=====
These classes all wrap the underlying implementations,
and are mainly useful only for plugging them into a :class:`~passlib.context.CryptContext`.
However, they can be used directly as follows::
>>> from passlib.hash import ldap_md5_crypt as lmc
>>> #encrypt password
>>> h = lmc.encrypt("password")
>>> h
'{CRYPT}$1$gwvn5BO0$3dyk8j.UTcsNUPrLMsU6/0'
>>> lmc.identify(h) #check if hash is recognized
True
>>> lmc.identify('JQMuyS6H.AGMo') #check if some other hash is recognized
False
>>> lmc.verify("password", h) #verify correct password
True
>>> lmc.verify("secret", h) #verify incorrect password
False
Interface
=========
.. class:: ldap_des_crypt()
.. class:: ldap_bsdi_crypt()
.. class:: ldap_md5_crypt()
.. class:: ldap_bcrypt()
.. class:: ldap_sha1_crypt()
.. class:: ldap_sha256_crypt()
.. class:: ldap_sha512_crypt()
All of these classes have the same interface as their corresponding
underlying hash (eg :class:`des_crypt`, :class:`md5_crypt`, etc).
.. note::
In order to determine if a particular hash is actually supported
natively by your host OS, use an test such as
``ldap_des_crypt.has_backend("os_crypt")`` or similar.
.. rubric:: Footnotes
.. [#pwd] The manpage for :command:`slappasswd` - `<http://gd.tuwien.ac.at/linuxcommand.org/man_pages/slappasswd8.html>`_.
.. [#rfc] The basic format for these hashes is laid out in RFC 2307 - `<http://www.ietf.org/rfc/rfc2307.txt>`_
|
