Hello,

I need that the userpasswords are stored hashed. I have configured the slapd.conf file with this option:

password-hash {SSHA}

But when I add users with ldapadd command, I pass the values of userpassword in plain text. Like this:

/opt/openldap/bin/ldapadd -x -D "root_dn" -w pass_dn << _EOF dn: uid=usu3,ou=users,o=my_organization uid: usu2 objectClass: top objectClass: person objectClass: organizationalperson objectClass: inetorgperson cn: my_cn sn: my_sn mail: my_mail@mydomain.com userPassword: usuario _EOF

I think that these values must be stored hashed, but they are only store in plain text in base64.

/opt/openldap/bin/ldapsearch -D cn="root_dn" -w pass_dn -x -b o= my_organization uid=usu3 -LLL

dn: uid=usu3,ou=users,o=my_organization uid: usu2 uid: usu3 objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson cn: my_cn sn: my_sn mail: my_mail@mydomain.com userPassword:: dXN1YXJpbw==

echo dXN1YXJpbw==|base64 -d usuario

What I am doing wrong? Thanks!