Skip to content

sysPass is being refactoredStay tuned for upcoming news.Follow the progress

Authentication

Documentation for sysPass 3.0.0Last reviewed 2019/01/05

These documents were last reviewed for sysPass 3.0.0 and may not describe the current release.

For the sysPass authentication it could be possible to use several methods:

  • MySQL/MariaDB database (by default)
  • LDAP directory (OpenLDAP, eDirectory, Active Directory, freeIPA, etc)

Note: If the LDAP option is enabled, the database authentication is used when the LDAP service is unavailable or the user doesn’t exist.

For the database authentication, a generated Blowfish hash within the user’s password is checked, so the password is never stored.

If LDAP is used:

  • The user’s Blowfish generated hash is stored in order to check it if the LDAP service is unavailable.
  • Neither the user’s login nor name nor email can be modified.