Re: (ITS#7278) [PATCH] SHA-2: Add support salted SHA-2 password hashes

[michael@stroeder.com]

hyc@symas.com wrote:
> Why should X user ever need to run this tool to generate a value?

>From slappasswd(8):

DESCRIPTION
       Slappasswd is used to generate an userPassword value suitable
       for use with ldapmodify(1), slapd.conf(5) rootpw configuration
       directive or the slapd-config(5) olcRootPW configuration directive.

Do you want to restrict this text regarding ldapmodify(1) only for the cases
that the slappasswd user has also write access to back-config?

Of course your are the OpenLDAP boss. You can change everything to make it
work for you. But it breaks existing operational procedures for other people.

Ciao, Michael.