Slepp Lukwai wrote:
>
> On the newer Slackware Linux distributions, the crypt method uses an MD5
> based check. I'm wondering if the passwords from /etc/shadow can be
> dropped straight into userPassword in an LDAP entry if prefixed with
> {MD5}.
>
> But, a password looks like:
>
> $1$0Extvkbl$UZAJdyCwsC9JaHTysElXB.
>
> I figure the $ is a delimeter, giving me:
>
> 1 0Extvkbl UZAJdyCwsC9JaHTysElXB.
>
> Is anyone familiar with this encryption method? And is it at all directly
> portable into an LDAP directory using one of the standard userPassword
> hashes?
The password you have there is simply hex. For ldap you need base64
encoding. So you have to write a simple script converting the linux
passwords back to binary and then to base64. Should be no problem
with perl or with a shell script.
--
Andre
> I'd rather not ask all my users to go in and set their passwords for their
> mail again, and to make it a seamless movement for the users.
>
> I've already tried just doing {MD5}data, but it won't verify... So, I'm
> not sure what to try next.
>
> --
> | Stephen "Slepp" Olesen / VE6SLP
> | Edmonton, Alberta, Canada / (780) 425-4798
> | President of Geeks Anonymous + http://www.geeksanon.ca/
> +---------------------------------