[Date Prev][Date Next] [Chronological] [Thread] [Top]

Encoding of userPassword entries



I'm trying to write a userpassword field using the perl Net::LDAP module.  My 
server is openldap-1.2.9.

a userpassword field that I wrote to contain this:

	{sha}nU4eI71bcnBGqeO0t9tXvY1u5oQ= 

looks like this when I use ldapsearch to look at it:

	userpassword:: e3NoYX1uVTRlSTcxYmNuQkdxZU8wdDl0WHZZMXU1b1E9Cg==

What does the double colon signify?

Also, I can't bind to the object with the plaintext version of the password.

However, if I look at the field using Net::LDAP, I see what I put in there.

Excerpts from my perl code:

use MIME::Base64;
use SHA;
.
.
.
my $sha = new SHA;
$params{'userPassword'} = [('{sha}' . encode_base64($sha->hash(param('password1'))))];

I assume that something else is base64 encoding my entry.  What am I doing 
wrong?

Chris

-- 
Chris Garrigues                 virCIO
http://www.DeepEddy.Com/~cwg/	http://www.virCIO.Com
+1 512 432 4046                 +1 512 374 0500
				4314 Avenue C
O-				Austin, TX  78751-3709
                                

  My email address is an experiment in SPAM elimination.  For an
  explanation of what we're doing, see http://www.DeepEddy.Com/tms.html 

    Nobody ever got fired for buying Microsoft,
      but they could get fired for relying on Microsoft.


Attachment: pgpUYMWSiC92c.pgp
Description: PGP signature