Create Authorization Script to check BCrypt Hash

Our default encryption method for stored passwords in OpenLDAP from 3.0.* to 3.1.2 is BCrypt. OpenDJ does not support BCrypt, so we need to develop an authorization script that utilizes a python library that can verify the passwords using this hashing algorithm.

Here is one example:

http://passlib.readthedocs.io/en/stable/index.html

http://passlib.readthedocs.io/en/stable/lib/passlib.hash.bcrypt.html

>>> from passlib.hash import bcrypt

>>> # generate new salt, hash password
>>> h = bcrypt.hash("password")
>>> h
'$2a$12$NT0I31Sa7ihGEWpka9ASYrEFkhuTNeBQ2xfZskIiiJeyFXhRgS.Sy'

>>> # the same, but with an explicit number of rounds
>>> bcrypt.using(rounds=13).hash("password")
'$2b$13$HMQTprwhaUwmir.g.ZYoXuRJhtsbra4uj.qJPHrKsX5nGlhpts0jm'

>>> # verify password
>>> bcrypt.verify("password", h)
True
>>> bcrypt.verify("wrong", h)
False

[colonha]

I tried but a subscriptions is required. Since they claim you can obtain and modify by your own i’m trying to contact them.

This version can only be downloaded with an active subscription

[yurem]

@sahiliamsso Can you move it to https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations and close after that?