Re: Openldap and PAM_LDAP

["Jan Z." <j.zeller@gpstechnik.ch>]

----- Original Message -----
From: "Marc Schöchlin" <schoechlin@linetics.de>
To: "LDAP_LIST" <openldap-software@OpenLDAP.org>
Sent: Wednesday, August 08, 2001 4:09 PM
Subject: Openldap and PAM_LDAP


>How can I change this to encyrpted style ?

There are different possibilities depending of the openldap-version you're
using.
With openldap-1.2.11 it was possible to use ldappasswd with the -H switch to
determine the password encryption.
With openldap-2.0.11 you have to enter the desired method in slapd.conf

>How can I change passwords of users without knowing the old passwords
>from the shell ?

you can for example simply use ldappasswd (1.2.11) like this

#!/bin/sh
echo -n "Username : "
read user

ldappasswd -vvv \
-b "o=xx,c=yy" \
-D "cn=ldapadmin, o=xx, c=yy" \
-H crypt \
-h localhost \
-p 389 \
-t "uid=${user},o=xx,c=xx" \
-w ldapadmin \
-h localhost


hope this helps,


Jan