tags:

views:

31

answers:

0
Q: 

Digest authentication using LDAP only

Is there a way to validate digest authentication using LDAP only? I.e. if I have the following request from a client (stealed from Wikipedia):

GET /dir/index.html HTTP/1.0
Host: localhost
Authorization: Digest username="Mufasa",
                      realm="[email protected]",
                      nonce="dcd98b7102dd2f0e8b11d0f600bfb0c093",
                      uri="/dir/index.html",
                      qop=auth,
                      nc=00000001,
                      cnonce="0a4f113b",
                      response="6629fae49393a05397450978507c4ef1",
                      opaque="5ccc069c403ebaf9f0171e9517f40e41"

could I validate the user against LDAP, meaning if I don't now user password hence is not able to construct a digest hash to compare with the response?

related questions

Is it an MD5 digest in this Python script?
Cache SHA1 digest result?
XML Signature: How to calculate the digest value?
Setting up a weekly digest in Sharepoint
Are there algorithms for putting a digest into the file being digested?
Can't connect to a TLS web service using C# and digest authentication, Firefox succeeds where IE8 fails
HTTP Digest Authentication
How to check two hashed passwords are the same?
HTTPS & Digest Authentication
Client Digest Authentication Python with URLLIB2 will not remember Authorization Header Information
Why does Digest::SHA come up with different hashes than those shown in RFC 4868?
Cannot build "cyrus-sasl-2.1.23" on SUSE Linux 10.0
What are the chances that two messages have the same MD5 digest and the same SHA1 digest?
JDBCRealm digest for MySQL PASSWORD() function
Difference in SHA512 between python hashlib and sha512sum tool
Auth (digest) request from Servlet
hash collision and appending data
Best general-purpose digest function?
HTTP Digest Authentication versus SSL
Implement Digest authentication via HttpWebRequest in C#
Why would HMAC SHA-1 return a different digest with the same input?
Example of using AuthType Digest to authenticate a user once across sub-domains?
Creating an id from name and address data. Hash/Digest
Is there a service that can take a feed and produce a daily digest from it?
Is my OCaml implementation of SHA256 sane?