Re: userPassword not crypted

[Markus Storm <Markus.Storm@mediaWays.net>]

That question is recurring again and again.

While ldappasswd encrypts the password, a lot of
other clients don't.
iplanet's server has always been doing this
and obviously several people have been relying
on it to do so.

Offering that feature might motivate more admins
to migrate to OpenLDAP.
Anyone mind programming automatic server-side
encryption into slapd ? Could be made configurable
for those who don't want it.

regards,
Markus

Pierangelo Masarati wrote:
> 
> > Hi all.
> >
> > I have a problem with OpenLDAP 2.0.11 and 'userPassword' attribute.
> >
> > In slapd.conf I have a line like this:
> >
> > password-hash   {SHA}
> >
> > I add the following ldif with ldapadd without problem:
> >
> > ----
> > dn: uid=test3, ou=usuarios, o=dominio.com
> > objectclass: misusuarios
> > cn: Usuario de test3
> > uid: test3
> > userpassword: test3
> > mail: test3
> > mail: test3@dominio.com
> > ----
> >
> > And now, if I do a search with ldapsearch, the 'userpassord' is NOT
> > crypted:
> >
> > ---
> > uid=test3, ou=usuarios, o=dominio.com
> > objectClass=misusuarios
> > cn=Don Usuario de test3
> > uid=test3
> > userPassword=test3
> > mail=test3
> > mail=test3@dominio.com
> > ---
> >
> >
> > Any one know why openldap not crypt the userPassword with SHA ??
> >
> >
> > Thanks in advance and greetings from Spain.
> 
> You need to use ldappasswd to trigger the exop that crypts the password.
> 
> Pierangelo.