password-policy

How to activate password policy to use Extended operation for password reset in OpenLDAP/windows

眉间皱痕 提交于 2020-02-07 05:17:11
问题 I have created password policy by following procedure mentioned for OpenLDAP But I don't observed its effect when I change password of user through extended operation. I get the response control but it has only warning instead of error. So question is what is missing from my side ? How to enforce password policy to use extended operation for resetting password ? Once I define password policy would it be applicable for all existing users in OpenLDAP server? Or it will be applicable for new

How to unlock user on ApacheDS

*爱你&永不变心* 提交于 2019-12-22 09:13:21
问题 I setup an ApacheDS with default password-policy enabled. For testing proposes I locked a simple User (objectClass=Person extended with some custom User-objectClass) by entering the wrong credentials a number of times. As I expected the user was locked (error msg: user was permanently locked). The question now is: How to unlock the user again? Is there a better way then just deleting and adding again? I tried the same with an extended user (objectClass=pwdPolicy) but no pwd* attributes were

PBKDF2 with HMAC in Java

余生长醉 提交于 2019-12-07 06:08:58
问题 This question was migrated from Information Security Stack Exchange because it can be answered on Stack Overflow. Migrated 6 years ago . I am working on a Java project where I must ensure the confidentiality and integrity of users password saved in a plaintext file. To do so, I will write only a hash of the password in the file. More specifically, my intention is to write the hash of the password and a random salt, plus the random salt itself, to avoid the use of rainbow and lookup tables. I

How to unlock user on ApacheDS

99封情书 提交于 2019-12-05 15:34:47
I setup an ApacheDS with default password-policy enabled. For testing proposes I locked a simple User (objectClass=Person extended with some custom User-objectClass) by entering the wrong credentials a number of times. As I expected the user was locked (error msg: user was permanently locked). The question now is: How to unlock the user again? Is there a better way then just deleting and adding again? I tried the same with an extended user (objectClass=pwdPolicy) but no pwd* attributes were added when the user was locked. More recently, I encountered the same problem at work. But, it seems