Compare LDAP password with php crypt password

coolamit78 · 01-29-2006, 10:45 AM

Hi..

I want to authenticate users on my LDAP server through a PHP script. To start with, I am just trying to match the passwords of LDAP with PHP. But when I try to bind to the ldap server with the dn uid=$user,ou=Users,dc=mydomain,dc=com - authentication fails because the crypt password generated in LDAP dosent match the password generated by the crypt () function in PHP.

I have searched a bit on crypt() function usage in php and tried few algorithms on the plain-text password, but none of the generated password hash matches the password stored in my LDAP database. I am using smbldap-tools in my implementation of LDAP, SAMBA PDC.

The password in LDAP database is 13 characters while php generates a 34 character crypted password string. I am confused on how to match the stored LDAP password with the php password.

Any help here will be appreciated..

Thanks,

Amit

spooon · 01-30-2006, 05:35 AM

to verify a password, you do something like

Code:

if (crypt($user_input, $password_hash) == $password_hash) {
   echo "Password verified!";
}

because hashes are salted, so you need to give the salt in the original hash to generate the same hash; also, crypt() in PHP supports different algorithms (the 34 character one was probably MD5) and giving it the original hash will tell it to use the proper algorithm to use (the 13 character one is probably traditional DES)