PBKDF2 Password Storage Scheme

The PBKDF2 Password Storage Scheme provides a mechanism for encoding user passwords using the PBKDF2 message digest algorithm.

This scheme contains an implementation for the user password syntax, with a storage scheme name of "PBKDF2".

Parent

The PBKDF2 Password Storage Scheme object inherits from Password Storage Scheme.

Properties

Use the --advanced option to access advanced properties.

Basic Properties

Advanced Properties

Basic Properties

enabled

SynopsisIndicates whether the Password Storage Scheme is enabled for use.
Default ValueNone
Allowed Valuestrue
false
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

pbkdf2-iterations

SynopsisThe number of algorithm iterations to make. NIST recommends at least 1000.
Default Value10000
Allowed ValuesAn integer. Lower limit: 1.
Multi-valuedNo
RequiredNo
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

Advanced Properties

java-class

SynopsisSpecifies the fully-qualified name of the Java class that provides the PBKDF2 Password Storage Scheme implementation.
Default Valueorg.opends.server.extensions.PBKDF2PasswordStorageScheme
Allowed ValuesA Java class that extends or implements:
org.opends.server.api.PasswordStorageScheme
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedYes
Read-OnlyNo