Hi!

After having loaded pw-sha2 in oOpenmLDAp 2.5, I tried to set a new default hashing schema, but I fail to do so using

dn: olcDatabase={-1}frontend,cn=config

changetype: modify

add: olcPasswordHash

olcPasswordHash: {SSHA256}

olcPasswordHash: {SSHA}

----

modifying entry "olcDatabase={-1}frontend,cn=config"

ldap_modify: Object class violation (65)

        additional info: attribute 'olcPasswordHash' not allowed

Before I had tried “replace” instead of “add”, and I tried to place both values in one line as suggested by slapd-config:

       olcPasswordHash: <hash> [<hash>...]

              This option  configures  one  or  more  hashes  to  be  used  in

              generation   of   user  passwords  stored  in  the  userPassword

              attribute during processing of  LDAP  Password  Modify  Extended

              Operations (RFC 3062).  The <hash> must be one of {SSHA}, {SHA},

              {SMD5}, {MD5}, {CRYPT}, and {CLEARTEXT}.  The default is {SSHA}.

The manual page also states:

This setting is only allowed in the frontend entry.

I’m running out of ideas.

Kind regards,

Ulrich Windl