Re: Why I can't move md5 password from ldap to shadow (fwd)

[Ben Collins <bcollins@debian.org>]

On Fri, Sep 15, 2000 at 04:16:36AM -0700, Kurt D. Zeilenga wrote:
> 
> At 10:34 AM 9/15/00 +0200, netadmin wrote:
> >I can move password from ldap to shadow but only when they was crypt'ed :
> >userpassword={crypt}xxxyyyzzz.
> 
> The {crypt} scheme supports any value your crypt(3)
> library call supports.  Many versions of crypt(3) support
> a variety of hash algorithms.
> 
> >I have some password with md5 :
> >userpassword={md5}12345678901234567890==
> >but they don't work...
> >In shadow i shoud have $1$xxyyzzuu$qqwweerrtt...
> 
> This is a password(5) format password and NOT compatible
> with either {MD5} nor {SMD5} format.  However, if your
> crypt(3) library call supports this format, you can
> use:
>         {crypt}$1$xxyyzzuu$qqwweerrtt

FYI, I've done this with great success on Linux (glibc 2.x supports md5
salted password hashes).

-- 
 -----------=======-=-======-=========-----------=====------------=-=------
/  Ben Collins  --  ...on that fantastic voyage...  --  Debian GNU/Linux   \
`  bcollins@debian.org  --  bcollins@openldap.org  --  bcollins@linux.com  '
 `---=========------=======-------------=-=-----=-===-======-------=--=---'