--On Tuesday, October 30, 2007 4:05 PM -0500 Hang Zhang hzhang@cs.uno.edu wrote:

C:\OpenLDAP>slappasswd -h {CRYPT} New password: Re-enter new password: Password generation failed for scheme {CRYPT}: scheme not recognized

Using crypt is bad.

--Quanah

--

Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

On 10/31/07, Piotr Wadas pwadas@jewish.org.pl wrote:

On Tue, 30 Oct 2007, Quanah Gibson-Mount wrote:

...

--On Tuesday, October 30, 2007 4:05 PM -0500 Hang Zhang hzhang@cs.uno.edu wrote:

...

C:\OpenLDAP>slappasswd -h {CRYPT} New password: Re-enter new password: Password generation failed for scheme {CRYPT}: scheme not recognized

Using crypt is bad.

--Quanah

Can you explain why it is bad? We use it mainly because we're moving our users and passwords from shadow files, is something wrong with {CRYPT} passwords ? Is it deprecated, or something? Regards, Piotr

See: http://www.openldap.org/faq/data/cache/419.html http://www.openldap.org/faq/data/cache/344.html http://www.openldap.org/faq/data/cache/348.html

You've gotten lots of useful links that point out that crypt(3) is highly OS dependent. With that in mind, my guess would be that MinGW (I think that's what Win32 OpenLDAP builds are using nowadays?) doesn't ship with a compatible crypt(3) implementation. Perhaps you should download a source tree, run configure, and verify that

[what it "should" be, from a Linux box] checking crypt.h usability... yes checking crypt.h presence... yes checking for crypt.h... yes

comes out. I'm not sure that MinGW even ships with a crypt.h...that would be an issue here. If any of those are "no," you'll have to go hunt for a compatible crypt(3) implementation, and compile yourself.

And as hopefully obvious from the FAQ entries linked, if you do decide to figure this out, the crypt'd values you copy over from (Linux/Solaris/HPUX/AIX/whatever) are quite unlikely to "work," because the values are highly OS dependent. I have to assume you're trying to copy existing crypt'd values -- if they were original, you'd just go with SHA1 or some other sane algorithm?

On Wed, 31 Oct 2007, Hang Zhang wrote:

Hang Zhang wrote:

...

Hi All,

I met a big problem! It is Ok when I use slappasswd -h {MD5}or {sha} but when I use slappasswd -h {CRYPT}, it reminds me that the {CRYPT} scheme not recognized! I search this problem in google and the answer to this is --enable -crypt. However, how to do this under windows XP? I would really appreciate any kinds of help!!

C:\OpenLDAP>slappasswd -h {CRYPT} New password: Re-enter new password: Password generation failed for scheme {CRYPT}: scheme not recognized

Hang

No one know about this problem? I really need some help on this issue!! I have struggle on this problem for a week!! Thanks a million!

Hang