Re: Different algorithms for passwod encryption/hashing ?

On Wed, Jul 20, 2005 at 06:34:49PM +0200, Marius T. wrote:
> On Wed, Jul 20, 2005 at 03:19:24PM +0200, [email protected] wrote:
> > Hi,
> > 
> > I've just stumbled about the missing LDAPAuthPWType SSHA, which is the
> > default algorithm used in OpenLDAP.
> > Crypt and plain are supported in the ftp-proxy, but ssha is not, as far as
> > I can see.
> > 
> > Is there any chance for this being supported or any reason why this is not
> > the case ?
> 
> No - don't use the manual password checks using LDAPAuthPWAttr and
> LDAPAuthPWType. They are legacy code, required for openldap-1.x only!
> 
> Use "LDAPBindDN auto" instead to let the ldap server authenticate
> using a ldap simple bind.

Using this, the proxy just uses the algorithms supported by the server
in a ldap_simple_bind call. Other binds, like ldap_sasl_bind are not
supported by the proxy.

Bye,
 Marius.
--
 ° --- Marius Tomaschewski <[email protected]>, Germany --- °
   The number of UNIX installations has grown to 10, with
   more expected.
   - The Unix Programmer's Manual, 2nd Edition, June 1972

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]