(ITS#3557) {SSHA} not the default when using exop

[warren@nature-soft.com]

Full_Name: Warren Howard
Version: 2.2.19
OS: Gentoo
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (203.145.184.252)


Hi,

I'm using openldap 2.2.19 and pam_ldap 176.

I have exop enabled in pam_ldap's ldap.conf.

When I change the password using the passwd command (i.e. through pam_ldap and
exop) the password is encrypted in the directory as {SMD5}.  However the man
page for slapd.conf clearly states that {SSHA} is the default value for
password-hash.  If I add password-hash {SSHA} to slapd.conf changing the
password through the passwd command encryps the password in the directory as
{SSHA}.  So I think something is a miss here - it should not be necessary to
have password-hash {SSHA} explicity listed in slapd.conf since it is the
default.

Regards,


Warren Howard
www.nature-soft.com