[Date Prev][Date Next] [Chronological] [Thread] [Top]

Confused about md5 passwords

To: openldap-software@OpenLDAP.org
Subject: Confused about md5 passwords
From: Harry Hoffman <hhoffman@ip-solutions.net>
Date: Wed, 12 Dec 2001 11:15:45 -0500
User-agent: Internet Messaging Program (IMP) 4.0-cvs

Hi All,
  I'm a little confused and hopefully someone can help. I've added users into my ldap db with md5 passwords and authentication is working just fine. However when I use ngrep to watch the traffic between the application requesting autentication and the ldap db I see the password in clear text.
Should this be happening? If so what purpose does moving to md5 present? Or is it just that should someone be able to grab the ldap passwords it will be more difficult to crack?

Relavant info:
Openldap 2.0.11
nss_ldap 149-4
Redhat 7.1
All users are in ldap db and not in /etc/passwd or /etc/shadow.


Thanks,
Harry

-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/

Follow-Ups:
- Re: Confused about md5 passwords
  - From: Peter W <peterw@usa.net>
- Re: Confused about md5 passwords
  - From: Stephan Siano <stephan.siano@suse.de>
- Re: Confused about md5 passwords
  - From: Theodore Knab <tjk@annapolislinux.org>

Prev by Date: How to delete an entire branch of the tree?
Next by Date: Re: Confused about md5 passwords
Index(es):
- Chronological
- Thread