Comments (3)
Hi,
No, you cannot do that. The point of hashed passwords usually is that they cannot be (easily) decrypted. In LDAP authentication the LDAP server validates the user given password in bind
, there should be no need for you to handle the password, at least authentication wise. Use Google if you wish to find a tool for cracking SSHA hashes.
from passport-ldapauth.
Thanks vesse!
I have been searching it for a long while. I did not find any way yet. I have enabled SSL communication in LDAP server. And i'm using ldapjs client, but unfortunately that client stores the password in cleartext because if we encrypt/hash the password it can not be decrypted in bind operation. So should we leave it clear text or any other suggested solution?
from passport-ldapauth.
I'm not too familiar with LDAP servers, but I believe it should be the server that performs the hashing, and quick googling showed that at least openLDAP can be configured to hash the passwords. This way it would not be your problem, and the server could perform bind as it would be able to hash the bind password and compare it to the hash in it's database.
Now if you have manually hashed the password and stored it to LDAP server that is configured to use plain text authentication it expects the hash to be passed as password in bind
. If you use algorithm that will produce same output for same input on every call you could add a middleware that will change the user provided password to the hash before it is passed on to passport-ldapauth
.
from passport-ldapauth.
Related Issues (20)
- How can I tell when receiving the message Unauthorized if it for the LDAP bind credentials or the username I am searching for? HOT 1
- How to add SameSite strict to passport-Idapauth session cookie?
- Remove @types from package.json "dependencies" and place them in "devDependencies" HOT 1
- How to use dynamic ldap config options in a Nestjs app? HOT 1
- can we use passport-ldapauth for react app authentication
- using dynamic bindDN & bindCredentials from POST query HOT 2
- `errorhandler` called twice in strategy.js if LDAP server unreachable HOT 1
- To find which credentials is not valid.
- STARTTLS for passport-ldapauth HOT 1
- Comma in firstname or lastname fails user authentication.
- Real Error should also been handled as failed if multiple url provided
- Q: NestJs Passport Strategy implementation for LDAP/AD/Winauth
- LdapAuth and verifyCredentials
- Authentication not working if user cannot log on to domain server HOT 4
- Error when installing HOT 1
- Update to new issue template format
- Unable to attempt authenticate HOT 2
- passport-ldapauth does not allow caching of ldap responses by ldapauth-fork HOT 3
- got Unauthorized message but ldapsearch work HOT 2
- LDAP Search Fails Due To Spaces Inserted Into BaseDN HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from passport-ldapauth.