Re: /usr/local/etc/openldap/slapd.conf: line 39: <password-hash> scheme not available ({SHA512})
pw-ssha? I had a pw-sha2 module loaded but not pw-ssha. and the password module won't compile at this time because there's no radius-devel package for RHEL 8 that I can find in any repos. ---
Regards,
Kevin Martin
On Thu, Aug 26, 2021 at 11:09 AM Quanah Gibson-Mount quanah@symas.com wrote:
--On Thursday, August 26, 2021 11:55 AM -0500 kevin martin ktmdms@gmail.com wrote:
while trying to convert from a slapd.conf file to a cn=config style, slaptest displays the error as shown in the subject line. openldap 2.4 supported "password-hash {SHA512}" in the slapd.conf, is this simply an issue of password-hash not being able to be converted or is that *particular* password-hash line unsupported in the latest 2.5 (building from source)?
It has always required that the pw-ssha contrib module exist and be loaded in the configuration. 2.5 is no different than 2.4 in this.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
--On Thursday, August 26, 2021 12:32 PM -0500 kevin martin ktmdms@gmail.com wrote:
pw-ssha? I had a pw-sha2 module loaded but not pw-ssha. and the password module won't compile at this time because there's no radius-devel package for RHEL 8 that I can find in any repos.
Sorry, pw-sha2 module. ;)
If you have it instantiated and things aren't working, it would appear it's not actually loading as desired. But it's worked fine for me with existing 2.4 -> 2.5 configuration migrations, so this would be something different on your end.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
openldap-technical@openldap.org
-
kevin martin -
Quanah Gibson-Mount