Re: PROBLEM: can't use SASL to authentication openldap client

Hi,

"LI Ji D" Ji.d.Li@alcatel-lucent.com writes:

Hi,

I tried again with following steps:

dn: uid=admin,ou=People,o=Ever

objectClass: top

objectClass: person

objectClass: organizationalPerson

objectClass: inetOrgPerson

userPassword: {SHA}5en6G6MezRroT3XKqkdPOmY/BfQ=

[...]

4. slapadd -c -l Ever.ldif -f slapd.conf -v -d 256

5. ./ldapsearch -U admin -Y DIGEST-MD5

[...]

You have the attribute value for userPassword hashed with SHA, that is the password hash has a length of 32bit, SASL requires plain text password in order to create a challange, a challange based on a 32bit string is different from a challange based on a plain text password string.

-Dieter