Re: pw-totp

2021-06-07 Thread Michael Ströder
On 6/7/21 8:37 PM, Stefan Kania wrote: > that helped a lot :). My fault was I put the "olcPaswordHash" in "dn: > cn=config", but it it must be in {-1}frontend as the result of the test Hmmpf! Object class olcGlobal should not allow olcPasswordHash: https://bugs.openldap.org/show_bug.cgi?id=9575

Re: pw-totp

2021-06-07 Thread Michael Ströder
On 6/7/21 5:15 PM, Stefan Kania wrote: > Am 07.06.21 um 16:35 schrieb Michael Ströder: >> BTW: Note that choosing ARGON2 parameters is not trivial: >> >> https://openldap.org/hyperkitty/list/openldap-technical@openldap.org/message/4KYTNGJN7ETVO5RAD4W5DP5SMPBLPHA7/ >> > The link gives me a nice 404-

Re: pw-totp

2021-06-07 Thread Michael Ströder
On 6/7/21 3:40 PM, Stefan Kania wrote: > > > Am 07.06.21 um 15:29 schrieb Michael Ströder: >> To build with libargon2 (which supports all ARGON2 arguments): >> >> --enable-argon2 --with-argon2=libargon2 > > Now it's compiling but still the same error :-( > > Jun 07 15:37:24 ldap25-p02 slapd[815

Re: pw-totp

2021-06-07 Thread Stefan Kania
Thank's Quanah, that helped a lot :). My fault was I put the "olcPaswordHash" in "dn: cn=config", but it it must be in {-1}frontend as the result of the test shows: -- dn: olcDatabase={-1}frontend,cn=config objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-1}fron

Re: pw-totp

2021-06-07 Thread Quanah Gibson-Mount
--On Monday, June 7, 2021 9:03 PM +0200 Stefan Kania wrote: looks ok to me: --- My point was to examine the generated configuration in the testrun dir, which has a clearly working configuration for the argon2 module, and compare it to what you've done. Regards, Quanah

Re: pw-totp

2021-06-07 Thread Stefan Kania
Am 07.06.21 um 17:18 schrieb Quanah Gibson-Mount: > > > --On Monday, June 7, 2021 4:40 PM +0200 Stefan Kania > wrote: > >> >> >> Am 07.06.21 um 15:29 schrieb Michael Ströder: >>> To build with libargon2 (which supports all ARGON2 arguments): >>> >>> --enable-argon2 --with-argon2=libargon2 >>

Re: 2.57 to 2.58 update no structural objectClass in configuration table

2021-06-07 Thread Lists Nethead
Quoting Quanah Gibson-Mount : --On Monday, June 7, 2021 12:49 PM +0200 Lists Nethead wrote: Hi all, After 2.57 to 2.58 update, slapd refuses to start. OS is FreeBSD 12, slapd built from ports. No clue what is missing, the system ran for two years without a clitch during updates. It wo

Re: 2.57 to 2.58 update no structural objectClass in configuration table

2021-06-07 Thread Quanah Gibson-Mount
--On Monday, June 7, 2021 12:49 PM +0200 Lists Nethead wrote: Hi all, After 2.57 to 2.58 update, slapd refuses to start. OS is FreeBSD 12, slapd built from ports. No clue what is missing, the system ran for two years without a clitch during updates. It would appear the older build had

Re: pw-totp

2021-06-07 Thread Quanah Gibson-Mount
--On Monday, June 7, 2021 4:40 PM +0200 Stefan Kania wrote: Am 07.06.21 um 15:29 schrieb Michael Ströder: To build with libargon2 (which supports all ARGON2 arguments): --enable-argon2 --with-argon2=libargon2 Now it's compiling but still the same error :-( I suggest examining test0

Re: pw-totp

2021-06-07 Thread Stefan Kania
Am 07.06.21 um 16:35 schrieb Michael Ströder: > On 6/7/21 3:40 PM, Stefan Kania wrote: >> >> >> Am 07.06.21 um 15:29 schrieb Michael Ströder: >>> To build with libargon2 (which supports all ARGON2 arguments): >>> >>> --enable-argon2 --with-argon2=libargon2 >> >> Now it's compiling but still the

2.57 to 2.58 update no structural objectClass in configuration table

2021-06-07 Thread Lists Nethead
Hi all, After 2.57 to 2.58 update, slapd refuses to start. OS is FreeBSD 12, slapd built from ports. No clue what is missing, the system ran for two years without a clitch during updates. Thanks! 60bde84c ldif_read_file: read entry file: "/usr/local/etc/openldap/slapd.d/cn=config/olcDa

Re: pw-totp

2021-06-07 Thread Stefan Kania
Am 07.06.21 um 15:29 schrieb Michael Ströder: > To build with libargon2 (which supports all ARGON2 arguments): > > --enable-argon2 --with-argon2=libargon2 Now it's compiling but still the same error :-( Jun 07 15:37:24 ldap25-p02 slapd[8154]: olcPasswordHash: value #0: scheme not available

Re: pw-totp

2021-06-07 Thread Michael Ströder
On 6/7/21 2:31 PM, Stefan Kania wrote: > ok, I found the source files in server/slapd/pwmods. I was always > searching in contrib/slapd-modules/passwd. > I normally only user the debian-packages, but I want to start with 2.5 > as early as possible so I started to build 2.5 from source. Here is my >

Re: pw-totp

2021-06-07 Thread Stefan Kania
Hi Michael, ok, I found the source files in server/slapd/pwmods. I was always searching in contrib/slapd-modules/passwd. I normally only user the debian-packages, but I want to start with 2.5 as early as possible so I started to build 2.5 from source. Here is my ./configure-line: - ./c

Re: pw-totp

2021-06-07 Thread Michael Ströder
On 6/7/21 10:23 AM, Stefan Kania wrote: > ARGON2 is not part of the actual version 2.5.5 I only find the sources > on git.openldap.org. Not true. It's in the main code now: $ tar tzf openldap-2.5.5.tgz | grep argon openldap-2.5.5/tests/scripts/test083-argon2 openldap-2.5.5/doc/man/man5/slappw-ar

Re: pw-totp

2021-06-07 Thread Stefan Kania
Hi Quanah Am 05.06.21 um 22:11 schrieb Quanah Gibson-Mount: > > Personally I'd combine that with ARGON2 password hashes for secure > password hash storage + 2 Factor auth. ARGON2 is not part of the actual version 2.5.5 I only find the sources on git.openldap.org. Will it ever become part of the O