Re: capture password

To: RogÃrio Augusto Rondini <rarondini.paradygma@gmail.com>

Subject: Re: capture password

From: ClÃment OUDOT <clem.oudot@gmail.com>

Date: Fri, 4 Jul 2014 15:24:31 +0200

Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=ScWWUMEBIJiU5ZyMEs41FQlYxeeJjVvpLNkEBKrDQvE=; b=neRPS4SRP+I21yx7B5N5kALiUh6xv3LadxdEuAJpcDhpluEVoilkmFLVEDp1TYgEPp dhdVsU4XH2tlqcffwKlZUdztlxXVbDoOUbXSzPNbT7NDAbQjeZtqoFnSCkBWocTOBdX9 fES5CFpRJg4wJrfOQ8ur1D53ba+x9BPa1oGfuZg0HOmzhYgdEpWi/99tl13LMMYh4aM1 o9jyFSeJvwvs7Rw7f5GeTXIpCT1k/GEoTw5nI1fUScdTuPmrdbvDEaO3LsQiCF0fw6KR cPn9ZOY3fihp6iL844S8H7GS4H4sUzjNv50BH63oyYTy8lsfgzaGrVM+mmpz44JnKpU7 iHAw==

In-reply-to: <CALjMr90Vgx2DGdxnMMEkACg60YpPg6y=m8+H84cQutvg6Akb7Q@mail.gmail.com>

References: <CALjMr90Vgx2DGdxnMMEkACg60YpPg6y=m8+H84cQutvg6Akb7Q@mail.gmail.com>

2014-07-04 14:57 GMT+02:00 RogÃrio Augusto Rondini <rarondini.paradygma@gmail.com>:

Hi folks,

I need to implement password sync between AD and OpenLDAP using an IDM tool.

I want to know how to capture clear text password in OpenLDAP before encryption so that I can sync with AD and potentially with others user repositories.

Hi,

we have the same need with LSC (http://lsc-project.org) but the only way for now is to store a symmetric crypt password in a separate field, and decrypt it on the fly when doing synchronization to other directories.

ÂSee http://lsc-project.org/wiki/documentation/howto/activedirectory#password_synchronization

ClÃment.

Follow-Ups:

Re: capture password
- From: Howard Chu <hyc@symas.com>

References:

capture password
- From: RogÃrio Augusto Rondini <rarondini.paradygma@gmail.com>