On Thu, Mar 16, 2023 at 10:50 AM Quanah Gibson-Mount quanah@fast-mail.org wrote:

--On Thursday, March 16, 2023 11:29 AM -0400 Jeffrey Walton noloader@gmail.com wrote:

...

...

This doesn't make sense. You should be using an ldapv3 password modify operation on the user account in question and letting the server do the hashing (and also allows password policies, if deployed, to be used).

If I understand things correctly... The server does not hash the password. The server never gets to see the plaintext password.

You don't.

...

See https://www.postgresql.org/message-id/379034.1673389287%40sss.pgh.pa.us .

What does a thread about how postgres works have to do with OpenLDAP or the LDAP protocol?

My bad... I crossed my mailing lists.

Jeff