...
- hawcc — Hawaii Community College
- hcc — Honolulu Community College
- kcc — Kapiolani Community College
- kauaicc — Kauai Community College
- lcc — Leeward Community College
- mauicc — Maui Community College
- wcc — Windward Community College
- uhh — University of Hawaii at Hilo
- uhm — University of Hawaii at Manoa
- uhwo — University of Hawaii – West Oahu
- rcuh — Research Corporation of UH
Questions and Answers
...
Question: posted to https://groups.google.com/group/pgina-general
...
If LDAP authentication is successful, does pGina 3.0 use the cleartext
password and rehashes the windows password with it so that, eventually, the
repository of hashed windows passwords is a subset of the LDAP passwords
(though hashed)? We've inferred this from our internal discussions that
are somewhat dated, but would like to understand this better.
Thanks for any info.
- mhodges
Answer: provided by the developer
...
- pGina does not have a "repository of hashed windows passwords." Are you
referring to the Windows local account store (SAM)?
pGina works (in a typical LDAP-based configuration) by creating a local
Windows account that has the same username and password as the LDAP
account. That local account may be deleted after the user has logged out,
if the Local Machine plugin is configured to do so. If it is not
configured to do so, there may be a set of local accounts that is a subset
of the LDAP accounts (those users who have logged on to the machine).
Those accounts may or may not have the same password as the LDAP accounts
depending on how the Local Machine plugin is configured (see the "Scramble
password after logout" option).
For more information, please take a look at the documentation for the Local
Machine plugin, and the pGina user's guide. Let me know if there is
something that could be more clear. http://pgina.org/docs/local_machine.html http://pgina.org/docs/user.html
Thanks,
David