The Crypt Password Storage Scheme provides a mechanism for encoding user passwords using the UNIX crypt algorithm.
This implementation contains only an implementation for the user password syntax, with a storage scheme name of "CRYPT". Even though it is a one-way digest, the Crypt Password Storage Scheme is relatively weak by today's standards. Because it supports only a 12-bit salt (meaning that there are only 4096 possible ways to encode a given password), it is also vulnerable to dictionary attacks. You should therefore use this storage scheme only in cases where an external application expects to retrieve the password and verify it outside of the directory, rather than by performing an LDAP bind.
The Crypt Password Storage Scheme component inherits from the Password Storage Scheme
This page describes the Crypt Password Storage Scheme:
A description of each property follows.
| Basic Properties: | Advanced Properties: |
|---|---|
| ↓ enabled | ↓ java-class |
| Description | Indicates whether the Password Storage Scheme is enabled for use. |
| Default Value | None |
| Allowed Values | true false |
| Multi-valued | No |
| Required | Yes |
| Admin Action Required | None |
| Advanced Property | No |
| Read-only | No |
| Description | Specifies the fully-qualified name of the Java class that provides the Crypt Password Storage Scheme implementation. |
| Default Value | org.opends.server.extensions.CryptPasswordStorageScheme |
| Allowed Values | A java class that implements or extends the class(es) : org.opends.server.api.PasswordStorageScheme |
| Multi-valued | No |
| Required | Yes |
| Admin Action Required | None |
| Advanced Property | Yes |
| Read-only | No |
Each configuration property can be mapped to a specific LDAP attribute under the "cn=config" entry. The mappings that follow are provided for information only. In general, you should avoid changing the server configuration by manipulating the LDAP attributes directly.
| Base DN | cn=Password Storage Schemes,cn=config |
| objectclass name | ds-cfg-crypt-password-storage-scheme |
| objectclass superior | ds-cfg-password-storage-scheme |
| Property | LDAP attribute |
| enabled | ds-cfg-enabled |
| java-class | ds-cfg-java-class |