DA 1.5.1 and crypt/MD5 passwords
Joe Rhodes <[email protected]>
| Newsgroups | gmane.network.directoryadmin |
|---|---|
| Message-ID | <[email protected]> |
Hello all:
I just ran into something that's probably obvious, and I'm hoping
someone can smack me on the head.
I'm trying to get DA to store my users' passwords as MD5 instead of
crypt. But no matter how I set things in the "Compatibility" tab, I
keep getting passwords in OpenLDAP as "{crypt}blah blah balh".
Interestingly, the passwords appear to be different for each option
(the "crypt" or "MD5" radio buttons in DA's "Compatibility" tab). That
is, if I look at the password with gq, the hash seems to be different.
The problem here, is that my PAM setup seems to only work properly when
the passwords are stored as either plain text (yuck!) or MD5. It does
not work, for whatever reason, if the passwords are stored in crypt
format.
Now, starting DA from a command line (so I can see all the fun
debugging stuff) shows the following (This is with the Compatibility
button set to "MD5 hash".):
Called process preferences dialog
password type: md5sum(null)set password called with password:
supersecret
$1$BP0Ipx7K$6AUlqGkmKDibFp7x2lCAp.set password set attribute:
{crypt}$1$BP0Ipx7K$6AUlqGkmKDibFp7x2lCAp.
Fetching uid=ttest,ou=People,dc=demco,dc=com from directory
Entry was modified. Changes follow:
LDAP_MOD_REPLACE userPassword
{crypt}$1$BP0Ipx7K$6AUlqGkmKDibFp7x2lCAp.
The following entry was just added to the directory:
Entry DN: uid=ttest,ou=People,dc=demco,dc=com
Name: test test
UID: ttest
uidnumber: 502
Doing the same thing, but with the Compatibility option set to "Crypt",
here's what I get:
set password called with password: supersecret
set password set attribute: {crypt}6ux/LVCXcQoZg
Fetching uid=ttest,ou=People,dc=demco,dc=com from directory
Entry was modified. Changes follow:
LDAP_MOD_REPLACE userPassword
{crypt}6ux/LVCXcQoZg
The following entry was just added to the directory:
Entry DN: uid=ttest,ou=People,dc=demco,dc=com
Name: test test
UID: ttest
uidnumber: 502
So how do I get DA to store things as MD5? Any insights?
I did recompile DA from source, so that I know I'm liking against all
the same libraries and such. All I did was ./configure with no special
options.
I am NOT using the "Use the authPassword attribute" option, as it seems
OpenLDAP and its standard schema don't like that.
I'm running RH9
OpenLDAP 2.1.21
OpenSSL 0.9.7b
Any thoughts?
If I could ask you to reply to me directly, that'd be great. I only
get the digest version of this list.
Cheers!
-Joe
Joe Rhodes Consulting LLC.
(608) 358.0503
www.joerhodes.com
-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps1