Re: userPassword field in OpenLDAP

[Turbo Fredriksson <turbo@bayour.com>]

Quoting Jean-Eric Cuendet <Jean-Eric.Cuendet@linkvest.com>:

> But for external SASL authentification (GSSAPI or other), what should be the
> value of this parameter?
> Should it be completely removed? Or should it be set dependently of the
> mechanism used?

If you want simple authentication (-x, -D, -W and -w flags to ldapsearch etc)
because of backward compability with older clients, then exchange it with

userPassword: {SASL}username

You will have to compile with '--enable-spasswd' for this to work. If you on
the other hand (like me) are using KerberosV to store your passwords, compile
with '--enable-kpasswd', and use

userPassword: {KERBEROS}principal

http://www.bayour.com/kerberos/Kerberos-MiniHOWTO.html#krb5_userPassword-attrib

-- 
 Turbo     __ _     Debian GNU     Unix _IS_ user friendly - it's just 
 ^^^^^    / /(_)_ __  _   ___  __  selective about who its friends are 
         / / | | '_ \| | | \ \/ /   Debian Certified Linux Developer  
  _ /// / /__| | | | | |_| |>  <  Turbo Fredriksson   turbo@tripnet.se
  \\\/  \____/_|_| |_|\__,_/_/\_\ Stockholm/Sweden