On May 31, 2013, at 2:38 AM, wferi@niif.hu wrote:
Full_Name: Ferenc Wágner Version: 2.4.31 OS: Debian GNU/Linux squeeze URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (86.101.52.7)
I'm trying to store the hypothetical password "{SSHA}" in cleartext, but slappasswd refuses to help:
$ /usr/sbin/slappasswd -s {SSHA} -h {CLEARTEXT} Password verification failed.
On #openldap hbf suggested that I file an ITS ("work" in the following means allowing binding):
hbf: Looks like {CLEARTEXT} itself is broken. I think "userPassword: {CLEARTEXT}secret" should work, and so that slappasswd -h {CLEARTEXT} -s secret can output {CLEARTEXT}secret and userPassword: {CLEARTEXT}{SSHA} would be valid.
As I agree with him, here it is.
Not a bug...
Clear text passwords appear in userPassword without any RFC 2307 scheme, as in
userPassword: secret
not:
userPassword: {CLEARTEXT}secret
A cleartext password of {SSHA} is disallowed for what should be obvious reasons.
-- Kurt