[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldappasswd cannot change passwords when in slapd.conf: password-hash {CRYPT} (ITS#3805)



On Tue, Jun 28, 2005 at 12:26:35PM +0000, Pierangelo Masarati wrote:
> 
> > Hi!
> > It is not possible to change password with "ldappasswd" tool when using
> > "{CRYPT}" password-hash:
> > 
> > srv% # cat /usr/local/etc/openldap/slapd.conf|grep password-
> > password-hash   {CRYPT}
> > password-crypt-salt-format      "$1$%.8s"
> 
> likely, you didn't compile with --enable-crypt, or a suitable crypt couldn't be
> found, or the available crypt doesn't support the salt format.

I did compile with --enable-crypt an my system crypt supports salt format.
When I run OpenLDAP 2.2 it works fine.

My compile, build and install log is available on my Web:
http://www.iem.pw.edu.pl/~wielebap/ldap/openldap/2.3/password-hash/build.log

Can you tell me if this is a problem?
checking for crypt.h... no
checking for crypt... no
checking for crypt in -lcrypt... yes

My OpenLDAP 2.2 configure prints out the same results as above.

My config.log:
http://www.iem.pw.edu.pl/~wielebap/ldap/openldap/2.3/password-hash/config.log

> 
> > 
> > srv% ldappasswd  -x -D "uid=test,ou=users,dc=inter,dc=siec" -w oldpass -s
> > newpass
> > Result: Internal (implementation specific) error (80)
> > Additional info: password hash failed
> > 
> > 
> > There is _NO_ problem when using other password hashes, like {MD5}, {SMD5},
> > {SHA}, {SSHA} or {CLEARTEXT}.
> > Only {CRYPT} doesn't work, but I need it the most:-).
> > 
> > If you need further information let me know.
> 
> You should inspect the server logs, and config.log as well to see what crypt was
> detected, if any.
> 
> p.

Can you help me? What other information do you need?

Thanks for a fast answer.
Pawel Wieleba