Passlib provides three custom hash schemes based on the PBKDF2 [1] algorithm which are compatible with the ldap hash format: ldap_pbkdf2_sha1, ldap_pbkdf2_sha256, ldap_pbkdf2_sha512. They feature variable length salts, variable rounds.
See also
These classes are simply wrappers around the MCF-Compatible Simple PBKDF2 Hashes.
this is the same as pbkdf2_sha1, except that it uses {PBKDF2} as it’s identifying prefix instead of $pdkdf2$.
this is the same as pbkdf2_sha256, except that it uses {PBKDF2-SHA256} as it’s identifying prefix instead of $pdkdf2-sha256$.
this is the same as pbkdf2_sha512, except that it uses {PBKDF2-SHA512} as it’s identifying prefix instead of $pdkdf2-sha512$.
Footnotes
| [1] | The specification for the PBKDF2 algorithm - http://tools.ietf.org/html/rfc2898#section-5.2, part of RFC 2898. |