Bcrypt Password Storage Scheme

The Bcrypt Password Storage Scheme provides a mechanism for encoding user passwords using the bcrypt message digest algorithm.

This scheme contains an implementation for the user password syntax, with a storage scheme name of "BCRYPT".

Parent

The Bcrypt Password Storage Scheme object inherits from Password Storage Scheme.

Properties

Use the --advanced option to access advanced properties.

Basic Properties

Advanced Properties

Basic Properties

bcrypt-cost

SynopsisThe cost parameter specifies a key expansion iteration count as a power of two. A default value of 12 (2^12 iterations) is considered in 2016 as a reasonable balance between responsiveness and security for regular users.
Default Value12
Allowed ValuesAn integer. Lower limit: 1. Upper limit: 30.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

enabled

SynopsisIndicates whether the Password Storage Scheme is enabled for use.
Default ValueNone
Allowed Valuestrue
false
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

Advanced Properties

java-class

SynopsisSpecifies the fully-qualified name of the Java class that provides the Bcrypt Password Storage Scheme implementation.
Default Valueorg.opends.server.extensions.BcryptPasswordStorageScheme
Allowed ValuesA Java class that extends or implements:
org.opends.server.api.PasswordStorageScheme
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedYes
Read-OnlyNo