problem with cleartext password setup

2008-02-05 Thread Pat Riehecky
My reading the archives has lead me to believe that DIGEST-MD5 will require me to store passwords in cleartext. To evaluate the usefulness of this at my site (little point in storing them cleartext if nothing can use DIGEST-MD5) I have setup a test server, but the password keeps getting hashed I

Re: problem with cleartext password setup

2008-02-05 Thread Quanah Gibson-Mount
--On February 5, 2008 1:14:35 PM -0600 Pat Riehecky <[EMAIL PROTECTED]> wrote: Strangely they are not prefixed with the {HASHTYPE}. When I run ldappasswd -H ldapi:/// -D "cn=testuser,dc=iwu,dc=edu" -w Please -x -s please In LDAP I get userPassword:: cGxlYXNl What did I do? You failed to

Re: problem with cleartext password setup

2008-02-05 Thread Karsten Künne
On Tuesday 05 February 2008 14:14:35 Pat Riehecky imposed structure on a stream of electrons, yielding: > My reading the archives has lead me to believe that DIGEST-MD5 will > require me to store passwords in cleartext. To evaluate the usefulness > of this at my site (little point in storing them

Re: problem with cleartext password setup

2008-02-05 Thread Pat Riehecky
Thank you! I am an idiot. (but a happy one!) Pat On Tue, 2008-02-05 at 12:08 -0800, Quanah Gibson-Mount wrote: > --On February 5, 2008 1:14:35 PM -0600 Pat Riehecky <[EMAIL PROTECTED]> > wrote: > > > Strangely they are not prefixed with the {HASHTYPE}. > > > > When I run > > ldappasswd -H

Re: problem with cleartext password setup

2008-02-06 Thread Quanah Gibson-Mount
It depends on the definition of the field. userPassword is always base64 encoded. --Quanah --On February 6, 2008 2:15:21 PM -0500 "Chris G. Sellers" <[EMAIL PROTECTED]> wrote: I thought the field was only base64 encoded if it had offending characters such as a space, or something not LDIF

Re: problem with cleartext password setup

2008-02-06 Thread Chris G. Sellers
I thought the field was only base64 encoded if it had offending characters such as a space, or something not LDIF compliant? E.G. you could see an entry that says {crypt}AFDA12321de323 Sellers On Feb 5, 2008, at 3:08 PM, Quanah Gibson-Mount wrote: --On February 5, 2008 1:14:35 PM -0600 P