[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#8294) slappasswd can use SHA256 for hash but not SHA384 or SHA512...segfault



Full_Name: Kevin Martin
Version: 2.4.42
OS: 3.8.13-55.1.6.el7uek.x86_64
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (137.254.4.10)


Compiled 2.4.42 from source with the following configure options:

./configure --enable-ppolicy --enable-crypt --with-tls --enable-bdb
--enable-ldap --enable-slapd  --enable-slapi --enable-syslog --enable-modules

compiles and installs fine.  Built the pw-sha2 contrib module and installed with
no problems.

The following works fine:

   /usr/local/sbin/slappasswd -v -v -v -h '{SHA256}' -o
module-path=/usr/local/libexec/openldap -o module-load=pw-sha2 -s secret
{SHA256}K7gNU3sdo+OL0wNhqoVWhr3g6s1xYv72ol/pe/Unols=

 /usr/local/sbin/slappasswd -v -v -v -h '{CRYPT}' -c '$6$!4&&.'  -s secret
{CRYPT}$6$!4&&.$oINsiq8QMkQheQrdy0.qk7qKr7tNVNCX387QMrp8Y/w2y7JcazTvfKhG0mSGIAB1jWZ4xsDbsehH/4yPIns6I.


The following create segfaults:

   /usr/local/sbin/slappasswd -v -v -v -h '{SHA384}' -o
module-path=/usr/local/libexec/openldap -o module-load=pw-sha2 -s secret
Segmentation fault (core dumped)

/usr/local/sbin/slappasswd -v -v -v -h '{SHA512}' -o
module-path=/usr/local/libexec/openldap -o module-load=pw-sha2 -s secret
Segmentation fault (core dumped)


I shouldn't need to use CRYPT with a salt to create a SHA512 hashed password. 
Bug or something on my machine?

Regards,

Kevin Martin