[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: password validation

At 08:36 AM 11/15/2006, Douglas B. Jones wrote:
>b) tries to validate against all three locations.

Your assumption that a crypt(3) password generated on one
system (or by one cyrpt(3) implementation) is verifiable by
another is not generally valid.  It is well known that crypt(3)
behavior (whether by design or by bug) is implementation dependent
and, hence, portability of crypt(3)'ed passwords limited.  This
is why use of {CRYPT} is generally discouraged and why {CRYPT}
support is disabled by default in slapd(8).

This is discussed in the FAQ.
  <http://www.openldap.org/faq/index.cgi?file=344>http://www.openldap.org/faq/index.cgi?file=344

Kurt