[Date Prev][Date Next] [Chronological] [Thread] [Top]

Strange LDAP userPassword: i am losing my hairs



Dear gentleman,

i have installed openldap with sasl and ssl support. I am facing a
strange scenario:

Although i can do every operation with the rootdn/rootpwd in
/etc/ldap/slapd.conf i cannot log in with another DN.
I does not matter how i tried, using SASL or even simple bind on a dn.

What have realized that userPassword attribute type is changed from
what i feed ldapadd with my lidf file.

For instance: the entry from a ldif was:

dn: uid=sioux,ou=people,dc=ufv,dc=br
objectClass: account
objectClass: posixAccount
objectClass: top
cn: sioux
uid: sioux
uidNumber: 1000
gidNumber: 1000
homeDirectory: /home/sioux
userPassword: {SSHA}zK8OHcZn/Jz9Dj2ssRo4P8zY3uAD+5Ua
loginShell: /bin/sh
gecos: The root of all evil


But when i perform a command like:

sioux@centauro:~$ ldapsearch -x -LLL -D 'cn=admin,dc=ufv,dc=br' -W
'(uid=sioux)'
Enter LDAP Password:
dn: uid=sioux,ou=people,dc=ufv,dc=br
objectClass: account
objectClass: posixAccount
objectClass: top
cn: sioux
uid: sioux
uidNumber: 1000
gidNumber: 1000
homeDirectory: /home/sioux
userPassword:: e1NTSEF9eks4T0hjWm4vSno5RGoyc3NSbzRQOHpZM3VBRCs1VWE=
loginShell: /bin/sh
gecos: The root of all evil

sioux@centauro:~$

Realize that userPassword is totally diiferent from what is in the ldif file.

When i try to log:

sioux@centauro:~$ ldapsearch -x -LLL -D
'cn=sioux,ou=people,dc=ufv,dc=br' -W '(uid=sioux)'
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
sioux@centauro:~$



May some  one help me?