Re: viewing entries using slapcat

[Michael Adam <ma@SerNet.DE>]

Hi,

On Thu, Sep 13, 2007 at 07:28:50AM +0200, Pierangelo Masarati wrote:
> Neo - wrote:
> > Hi all, I use a ldapbrowser (its open source java ldapbrowser)  to view all my openldap entries.
> > Im able to read all the attribute values when i view through the ldapbrowser.
> > 
> > But when i do slapcat and generate a ldif file i see some attribute like this 
> > 
> > mail:: IGF2ZXJ5cG9obG1hbjM3QHdlYnN0ZXIuZWR1
> > 
> > 
> > but when i view the same entry in ldapbrowser its fine.
> > Any one know why entry looks encrypted using slapcat.
> 
> For security reasons, I guess. 

I'd think for reasons of not wanting to lose data due to
non-ascii characters (charset/locale settings...).
This is for exchanging contents of the database.

And btw, this is not encryption but encoding.

Cheers, Michael

> But I think we need to move to a
> stronger algorithm, this is quite easy to crack:
> 
> echo -n "IGF2ZXJ5cG9obG1hbjM3QHdlYnN0ZXIuZWR1" | base64 -d
>  averypohlman37@webster.edu
> 
> Remember: garbage in, garbage out.

-- 
Michael Adam <ma@sernet.de>
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE