Re: Double colon in LDIF

[Todd Lyons <tlyons@ivenue.com>]

rob fielding wanted us to know:

>I'm still finding my feet in LDAP and LDIFs but I've been led to think
>entries such as these were 'corruptions' :

Others have already mentioned that it is simply base64 encoded.  The
easiest way to see what's really in there is a good old commandline
utility:

>cisSetting:: Ym0ubmV3QGRl

[todd@tlyons ~]$ echo "Ym0ubmV3QGRl" | mimencode -u ; echo
bm.new@de

>dn:: AGNuPWRzdnIwMDAwLG91PUF

[todd@tlyons ~]$ echo "AGNuPWRzdnIwMDAwLG91PUF" | mimencode -u ; echo
Warning: base64 decoder saw premature EOF!
cn=dsvr0000,ou

That actually looks like some kind of error, but not sure where.

>Things to note: *all* userPassword entries are double colon entries in
>the LDIF - they are infact plaintext at this point, visible in gq. Not

Normal.

>Can someone clarify whether the above is 'normal' or not? I'm begining

As others have said, yes.

-- 
Regards...		Todd
They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety.       --Benjamin Franklin
Linux kernel 2.6.8.1-12mdkenterprise   1 user,  load average: 0.02, 0.04, 0.04