Re: forcing password hash

[Howard Chu <hyc@symas.com>]

Kurt D. Zeilenga wrote:
> At 11:57 AM 12/19/2005, Jim Boden wrote:
>   
> > Is there a way to force openldap to hash the  userPassword entry if the client does not?
> >     
>
> As distributed, no.  slapd(8) preserves the value of userPassword
> precisely as presented.
>   
>   
> >  But if the client does not use exop, is there anything we can do to force a hash?
> >     
>
> One could, I guess, write an overlay to hash the value on
> behalf of the client.
>
>   
The ppolicy overlay has a config option to force hashing on Modifies and 
Adds. See slapo-ppolicy(5).

--
 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 OpenLDAP Core Team            http://www.openldap.org/project/