Hello, I added the following attribute to my slapd.conf and it does not store the passwords in a hashed form. I am using a java program to to set the userPassword attribute after a user has been created.
password-hash {SSHA}
Is there anything that I need to configure to enable this?
Thanks for your help suneet
2012/4/4 Michael Ströder michael@stroeder.com
Please post your follow-ups on the mailing list so others can respond and learn as well.
Suneet Shah wrote:
So if create a user and then set the password on an existing user then,
the
password-hash attribute will work? And I can send the password to
OpenLDAP in
clear text?
Yes.
Also note the other poster's hint about using slapo-ppolicy and ppolicy_hash_cleartext if you're allowed to configure the server.
I am curious - if the client hashes the password, in my case it would be
my
java program, how will openldap use that hashed password during
authentication?
Wouldnt both (openldap and my java program) need to have the salt used
for
hashing? And in this case, only my java program would have that salt.
The salt is part of the userPassword value. See more information in OpenLDAP's FAQ-O-MATIC:
http://www.openldap.org/faq/data/cache/419.html
Ciao, Michael.