RE: root password security in slapd.conf

[Jason Bodnar <jbodnar@dev.tivoli.com>]

Has nothing to do with specifying a passwd file. You simply add:

rootdn  "cn=root, o=My Company"
rootpw  {crypt}mycryptedpassword

to slapd.conf in the backend section.

Keep in mind, I think you have to turn crypted passwords on when you build
slapd.

On 24-May-99 Himanshu wrote:
> 
> but where in the slapd.conf file do we really say that it has to take the
> password from the passwd file. I mean slapd.conf never specifies a unix
> user name or uid so as to extract password from passwd file.
> 
> Himanshu
> 
> On Mon, 24 May 1999, Matz, Guy wrote:
> 
>> i believe, and someone, please correct me, that the crypt passwd is the same
>> as you'd see it in a UNIX passwd file.  having said that, i don't know how
>> you'd change the password, short of chnaging your UNIX pasword to what you
>> want the slapd password to be, and cutting and pasting from /etc/passwd to
>> slapd.conf . . . .
>>
>> > -----Original Message-----
>> > From:      Himanshu [SMTP:hshah0@sac.cc.uky.edu]
>> > Sent:      Monday, May 24, 1999 4:03 PM
>> > To:        OpenLDAP-software@OpenLDAP.org
>> > Subject:   root password security in slapd.conf
>> >
>> >
>> > At present, I am using clear text password for rootpw in slapd.conf file.
>> > I want to avoid that by using {crypt} but have no idea about any
>> > cryptography stuff. Can anyone help me out with this.
>> >
>> > Where will I be storing root password (if at all) ?
>> > How will the authentication take place ??
>> >
>> > Thanks
>> > Himanshu
>> >
>> >
>>

---
Jason Bodnar + jbodnar@tivoli.com + Tivoli Systems

Keep brain from freezing.

                -- Homer Simpson
                   Simpson and Delilah