Matthew Crocker wrote:
> Envryption of the userPassword attribute is done by the LDAP server. 
> The attribute is stored as {ENC_TYPE}HASH where ENC_TYPE is the valid
> encryption types supported by the LDAP server (CRYPT,MD5,SHA1 ...) and

First, hashing is not encryption.

> HASH is the encrypted password.  QMAIL-LDAP simply attempts to bind to
> the LDAP server as the DN using the user supplied password. If it works
> the password is correct.   QMAIL-LDAP doesn't need to know how the
> password was encrypted.  This also allows you to have different
> encryption settings for users so you can migrate to a new scheme

Second, this isn't how everybody's qmail-ldap is configured.

Reply via email to