Password hashing?

[<kend@xanoptix.com>]

Hi, all.  I'm attempting to whip up a web-based LDAP authentication
front-end for a user-maintenance script, and I can't figure out how to
hash my passwords.  Here's the deal:

When I input a password via an ldif file, I use slappasswd to convert the
plaintext password to a {CRYPT} hash.  (Yeah, yeah, I know crypt sucks;
I'm using it for legacy reasons.)  When I query my database with
ldapsearch, however, I get something completely different.  Lastly, if I
query with gq, I get my original crypt.

Start with plaintext "foobar".
slappasswd -s foobar -c {CRYPT} returns  {CRYPT}{CBoeqknHnBQw
which I then enter via
userPassword: {CRYPT}{CBoeqknHnBQw
in an ldif file.  However, ldapsearch returns (note the double-colon)
userPassword:: e0NSWVBUfXtDQm9lcWtuSG5CUXc=


So, my question is:

1) How, via ldapsearch or Perl, do I pull the original {CRYPT} hash?
2) Failing that, how do I convert the {CRYPT} hash to the spiffy "::"
   format?

Thanks...

Ken D'Ambrosio
Sr. SysAdmin,
Xanoptix, Inc.