DA 1.5.1 and crypt/MD5 passwords

Joe Rhodes <[email protected]>
Newsgroups gmane.network.directoryadmin
Message-ID <[email protected]>
Hello all:

I just ran into something that's probably obvious, and I'm hoping 
someone can smack me on the head.

I'm trying to get DA to store my users' passwords as MD5 instead of 
crypt.  But no matter how I set things in the "Compatibility" tab, I 
keep getting passwords in OpenLDAP as "{crypt}blah blah balh".  
Interestingly, the passwords appear to be different for each option 
(the "crypt" or "MD5" radio buttons in DA's "Compatibility" tab).  That 
is, if I look at the password with gq, the hash seems to be different.

The problem here, is that my PAM setup seems to only work properly when 
the passwords are stored as either plain text (yuck!) or MD5.  It does 
not work, for whatever reason, if the passwords are stored in crypt 
format.

Now, starting DA from a command line (so I can see all the fun 
debugging stuff) shows the following (This is with the Compatibility 
button set to "MD5 hash".):

Called process preferences dialog
password type: md5sum(null)set password called with password: 
supersecret
$1$BP0Ipx7K$6AUlqGkmKDibFp7x2lCAp.set password set attribute: 
{crypt}$1$BP0Ipx7K$6AUlqGkmKDibFp7x2lCAp.

Fetching uid=ttest,ou=People,dc=demco,dc=com from directory

Entry was modified.  Changes follow:
LDAP_MOD_REPLACE userPassword
         {crypt}$1$BP0Ipx7K$6AUlqGkmKDibFp7x2lCAp.


The following entry was just added to the directory:
Entry DN: uid=ttest,ou=People,dc=demco,dc=com
Name: test test
UID: ttest
uidnumber: 502

Doing the same thing, but with the Compatibility option set to "Crypt", 
here's what I get:

set password called with password: supersecret
set password set attribute: {crypt}6ux/LVCXcQoZg

Fetching uid=ttest,ou=People,dc=demco,dc=com from directory

Entry was modified.  Changes follow:
LDAP_MOD_REPLACE userPassword
         {crypt}6ux/LVCXcQoZg


The following entry was just added to the directory:
Entry DN: uid=ttest,ou=People,dc=demco,dc=com
Name: test test
UID: ttest
uidnumber: 502



So how do I get DA to store things as MD5?  Any insights?

I did recompile DA from source, so that I know I'm liking against all 
the same libraries and such.  All I did was ./configure with no special 
options.

I am NOT using the "Use the authPassword attribute" option, as it seems 
OpenLDAP and its standard schema don't like that.

I'm running RH9
OpenLDAP 2.1.21
OpenSSL 0.9.7b

Any thoughts?

If I could ask you to reply to me directly, that'd be great.  I only 
get the digest version of this list.

Cheers!
-Joe

Joe Rhodes Consulting LLC.
(608) 358.0503
www.joerhodes.com



-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps1
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.