Re: iPlanet Directory migration into OpenLDAP

[Dieter Kluenter <dieter@dkluenter.de>]

"Lloyd H. Meinholz" <lloyd.meinholz@bmpcoe.org> writes:

> How do you dump the hashes from iPlanet? I'm not getting {SSHA} stuff
> when I do it via ldapbrowser. I'm getting something like this:
>
> userPassword::
> e1NTSEF9ZZc5eFc0N1hOT2x2YnNIUzBARi9qWmx1N3FzL1gzUnhBbDJMU3c9PQ
>  ==
>
> What the heck is that format???

dieter@marin:~> mmencode -u
e1NTSEF9ZZc5eFc0N1hOT2x2YnNIUzBARi9qWmx1N3FzL1gzUnhBbDJMU3c9PQ
 =={SSHA}e9xW47XNOlvbsHS0@F/jZlu7qs/X3RxAl2LSw=

base64 encoding of SSHA encrypted password.

-Dieter
>
> Lloyd
>
> On Tue, 2003-09-09 at 14:39, Joshua Bernstein wrote:
>> Well if you just dump the hashes from iPlanet and then import the hash 
>> into OpenLDAP you should be alright! It will be in the form of 
>> {SSHA}3wr58a0ew9rsldihjf
>> or something like that...
>> 
>> Don't forget to migrate the schemas too...
>> 
>> On Monday, September 8, 2003, at 03:56  AM, Lloyd H. Meinholz wrote:
>> 
>> > I am in the process of migrating from iPlanet Directory Server 5.0 into
>> > OpenLDAP 2.1.22. I think I have the OpenLDAP server set up to my liking
>> > and I am now trying to migrate the ldap data. I am dumping the data 
>> > from
>> > Directory Server into an ldif file. I am having is with the passwords.
>> > I've been searching and can't seem to figure out how to get the
>> > passwords converted into a form OpenLDAP can deal with. Does anyone 
>> > have
>> > any pointers etc.? I've been looking through the docs, archives and
>> > google, but haven't found anything yet. Thanks for any pointers,
>> >
>> > Lloyd
>> >
>> >
>> >
>> -Joshua Bernstein
>> Systems Analyst
>> University of Arizona
>> Tucson, Arizona, USA
>

-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter(at)dkluenter.de
http://www.avci.de