[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: pwdCheckQuality and password hashing

sudhakar wrote:
I'm using pwdCheckQuality to enforce password quality restrictions for
the userPassword attribute. In order for this to work the password has
to be received on the server end in plain text. Which is fine. But when
OpenLDAP stores the password it stores it in plain text (base64 encoded).

Is there some overlay that will encrypt the userPassword before storing it?

You can use the ppolicy_hash_cleartext directive in slapo-ppolicy.


Rgds, Ray

-- Raymond B. Edah e-mail: t2tre@skyblue.eu.com web: http://www.cs.skyblue.eu.com