[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP as a SASL backend

"Zohar Lev Shani" <levshani5252@gmail.com> writes:

> I understand now why I cannot put hashed userPassword when I use SASL. But,
> does it mean that the ONLY place where I can use hashed passwords for
> authentication is the rootpw directive in slapd.conf, or, there are more
> sensible use cases where it can be used?
>
> On 11/5/07, Howard Chu <hyc@symas.com> wrote:
>     Dieter Kluenter wrote:
>     > "Zohar Lev Shani" < levshani5252@gmail.com > writes:
[...]

You may use hashed passwords as userPassword attribute value for
simple binds. Why do you want hashed passwords at all? I think this is
just security by obscurity.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6