Re: Userpasswords stored in plain text

[Dieter KlÃnter <dieter@dkluenter.de>]

Am Wed, 6 Mar 2013 09:58:40 +0000
schrieb arantza serrano <zazu2276@hotmail.com>:

> Hello,
>  
> I need that the userpasswords are stored hashed. I have configured
> the slapd.conf file with this option:
> 
> password-hash {SSHA}
>  
> But when I add users with ldapadd command, I pass the values of
> userpassword in plain text. Like this: 
> 
> /opt/openldap/bin/ldapadd -x -D "root_dn" -w pass_dn << _EOF
> dn: uid=usu3,ou=users,o=my_organization
> uid: usu2
> objectClass: top
> objectClass: person
> objectClass: organizationalperson
> objectClass: inetorgperson
> cn: my_cn
> sn: my_sn
> mail: my_mail@mydomain.com
> userPassword: usuario
> _EOF
[...]

If you add a new entry, create the password hash by mean of
slappasswd(8), if you want to modify a user password, use ldappasswd(1).

-Dieter

-- 
Dieter KlÃnter | Systemberatung
http://dkluenter.de
GPG Key ID:DA147B05
53Â37'09,95"N
10Â08'02,42"E