Hi,
On Thu, 11 Jun 2015, parakrama55 . wrote:
Hi Guys
Im adding users data to the ldap from external program or client , There im sending UserPasswrd in clear text .
So Is there any configuration directive in opendap where we can force openldap to store receiving clear text password in SSHA format .
use the ppolicy overlay and the ppolicy_hash_cleartext feature.
man slapo-ppolicy
ppolicy_hash_cleartext Specify that cleartext passwords present in Add and Modify requests should be hashed before being stored in the database. This violates the X.500/LDAP information model, but may be needed to compensate for LDAP clients that don't use the Pass- word Modify extended operation to manage passwords. It is rec- ommended that when this option is used that compare, search, and read access be denied to all directory users.
Greetings Christian
Please advice
Thank You Dhanushka