Reputation: 12123
When you authenticate a user against an LDAP server is it possible to send a password hash instead of a plaintext password?
If so, what password hashes does LDAP recognize?
Thanks
Upvotes: 2
Views: 2634
Reputation: 81507
No. You would need to know a lot of info about LDAP's security internals such as the hashing algorithm and salt (if any) used. These are not the kinds of information that closed systems usually share with the outside world.
Another way to think about is: What would it take for Google or Facebook to recognize a password hashed in another application, and would this be useful?
Upvotes: 3