Re: use proprietary password hash in "userpassword"

2017-01-19 12:31 GMT+01:00 Howard Chu hyc@symas.com:

Meike Stone wrote:

...

...

Write a openldap modul like pw-sha2 is not the first choice, because we need to compile the openldap after each update on our own and that prevents us to use the distribution packages.

Writing an OpenLDAP module like pw-sha2 is precisely the way to write a small external binary to validate passwords.

There's no need to recompile all of OpenLDAP just to update a password module.

If I use the binary openldap package from the distributor (*1), and I like to use a own module, I don't have to recompile the whole openldap, compiling the module is sufficient?

(1) we think about a subscription from symas ...

Thanks Meike