I would like to store user credentials in an OpenLDAP or similar directory server.
A lot of online commentary about storing passwords in modern contexts recommends using password derivation schemes like PBKDF2, bcrypt and scrypt. It looks like OpenLDAP offers salted SHA1 as it's "most secure" storage option.
- Is Salted SHA strong enough to protect passwords in the event of compromise?
- What are my options for hardening password storage on OpenLDAP?