Re: [phpldapadmin] PHP LDAP Admin User Help Needed -- LDAP User Password Retrieval

Deon,

Thanks for saying what you previously told me.  I think I am comprehending a little better now.

Unfortunately, we were delivered our LDAP baseline as GFE and the identity of the "Administrator" has been lost.
Also not delivered is any documentation as to how to affect/change the ldap server behavior.

With my newfound enlightenment, I am beginning to realize that the Config.php file does not control ldap server behavior.  Does the server control how the password is presented on the PLA screen?  I edit the password, change it, and specify "clear", yet it still gets displayed as **********.  Is this behavior controlled by the server or by the Config.php file ?

Thanks.

Al

-----Original Message-----
From: Deon George [mailto:[email protected]] 
Sent: Wednesday, June 08, 2011 7:48 PM
To: [email protected]
Subject: Re: [phpldapadmin] PHP LDAP Admin User Help Needed -- LDAP User Password Retrieval

Al,

As I mentioned in in an earlier mail:

> Administrators store LDAP passwords using a format that they want -
which can be in clear text (unlikely), or encrypted.

So in PLA, you can choose the format you want (and the default if
nothing is specifically selected) by using the helper function in the
templates (which is there by default if you are using the default
supplied templates).

These PLA routines, will alter the clear text input that is provided by
the user and modify it to the format that you have specified (or leave
it as is if you use CLEAR), and submit the resulting value to the LDAP
server for a new entry (creating a new entry), or an update (in the case
of an existing entry).

> Further LDAP servers can be configured to encrypt a clear text
password automatically when storing it.

Regardless of what you submit to the LDAP server with PLA (a clear text
password, or an encrypted one), the LDAP server can be configured to do
something else with that attribute value - you should refer to your LDAP
server configuration and LDAP server support for help in this area.

For example, its possible to submit a clear text password to an LDAP
server, but it in turn encrypts it as per the ldap server configuration.
PLA has no knowledge or control over this process, nor will have the
ability to de-decrypt it to present it in its original clear text format.

I hope this makes it clearer.

...deon


------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/

------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/