Re: multi-valued userPassword attributes.

[Chris R. <chr...@me...>]

Rusty Biggs <rg...@di...> wrote:
> On Apr 8,  2:54pm, Chris Ridd wrote:
>> Subject: Re: multi-valued userPassword attributes.
>> Clif Harden <cl...@di...> wrote:
>> > 
>> > 
>> > I have a question for the gurus of ldap.
>> > 
>> > Does any one use multi-valued userPasswords?
>> > If multi-valued userPasswords are used could
>> > they have different encrption tags; {crypt}, {SHA}, etc.
>> 
>> The only real contraint the standards impose is that all values of an
>> attribute must compare different for equality.
>> 
>> Since the use of hashed password values is somewhat non-standard (they
>> are only loosely defined in an informational RFC) it is really something
>> you will need to ask your vendor about.
> 
> What about RFC 3112?

That describes a new attribute (authPassword) and syntaxes
(authPasswordMatch etc) though, and Clif was asking about userPassword.

> Yes, asking the vendor, and then testing the heck out of their product.

:-)

Cheers,

Chris