Re: contrib modules to promote to mainline for 2.5?

Quanah Gibson-Mount <[email protected]> Wed, 22 Apr 2020 11:57:44 -0700
Newsgroups gmane.network.openldap.devel
Message-ID <D16B6418BF6F13242BFBAC4C@[192.168.1.144]>

--On Wednesday, April 22, 2020 8:01 PM +0100 Howard Chu <[email protected]> 
wrote:

> Michael Ströder wrote:
>> On 4/22/20 6:15 PM, Quanah Gibson-Mount wrote:
>>> Are there any contrib modules that we should consider promoting to
>>> mainline for the 2.5 series?  I.e., sha2, argon2 seem like potential
>>> options.
>>
>> +1 for pw-sha2 and pw-argon2.
>
> sha2 is already obsolete, for password purposes. I see no reason to
> promote it.

Ok.  I would note that the argon2 module adds a dependency on a 3rd party 
library, so we'd need to add detection for it?

That's one reason to keep pw-sha2.  It's still better than the default SSHA.

Or perhaps to get bcrypt added, if we can ever get a proper response from 
the author.

--Quanah



--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>