Re: Configure replication without a plaintext password.

--On Friday, March 8, 2024 5:42 PM +0000 mbalakri@opentext.com wrote:

How to configure olcSyncrepl without a plaintext password? I tried using credentials="{SSHA256}jRlrKRCcrhYo7SqbPDc5WkoSxaHc8y/e0DPWaAnveUkQpQ7wEOW hsw==" format. Does olcSyncrepl accepts password in {SSHA256} format?

You will need to use a passwordless SASL mechanism, as others have noted. If you peruse the test suite, you will see that test068-sasl-tls-external configures SASL/EXTERNAL certificate authentication in an OpenLDAP server. I use SASL/EXTERNAL certificate authentication in my replication setup.

Regards, Quanah