[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: get cleartext password with ldapsearch/slapadd

To: openldap-software@OpenLDAP.org
Subject: Re: get cleartext password with ldapsearch/slapadd
From: Quanah Gibson-Mount <quanah@stanford.edu>
Date: Fri, 10 Oct 2003 10:17:02 -0700
Content-disposition: inline
In-reply-to: <3F86E2D3.1070708@mi.cl>
References: <3F86E2D3.1070708@mi.cl>

--On Friday, October 10, 2003 12:48 PM -0400 Eulogio Robles <eulogio.robles@mi.cl> wrote:

I need to export the whole directory to LDIF, including the passwords on
cleartext.
My slapd.conf includes the {CLEARTEXT} line. However, both slapcat and
ldapsearch print the userpassword field scrambled with base64.
If I use an "ldapsearch" application from a IPlanet Directory server
(which will be removed soon), the password is correctly displayed on
cleartext.
OpenLdap is compiled with the --enable-cleartext flag.

Is there anything else I'm missing?

Also : any field that includes some "non-english" character (like "ñ")
is also printed on base64. Any way to avoid that?


Why not simply create a quick perl script to convert back from base64?

--Quanah


--
Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
ITSS/TSS/Infrastructure Operations
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

References:
- get cleartext password with ldapsearch/slapadd
  - From: Eulogio Robles <eulogio.robles@mi.cl>

Prev by Date: get cleartext password with ldapsearch/slapadd
Next by Date: RE: Can slave forward a modify request to the Master ?
Index(es):
- Chronological
- Thread