[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: PROBLEM: can't use SASL to authentication openldap client



Hi,

"LI Ji D" <Ji.d.Li@alcatel-lucent.com> writes:

> Hi,
>
> I tried again with following steps:

>
> dn: uid=admin,ou=People,o=Ever
>
> objectClass: top
>
> objectClass: person
>
> objectClass: organizationalPerson
>
> objectClass: inetOrgPerson
>
> userPassword: {SHA}5en6G6MezRroT3XKqkdPOmY/BfQ=
[...]
>
> 4. slapadd -c -l Ever.ldif -f slapd.conf -v -d 256
>
> 5. ./ldapsearch -U admin -Y DIGEST-MD5

[...]

You have the attribute value for userPassword hashed with SHA, that is
the password hash has a length of 32bit,
SASL requires plain text password in order to create a challange, a
challange based on a 32bit string is different from a challange based
on a plain text password string.

-Dieter

-- 
Dieter Klünter | Systemberatung
sip: +49.40.20932173
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6