Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I use ldapsearch command, I see my password (is 'abc123') is encrypted in openldap:

userPassword:: e1NTSEF9THk4YmtNTUxHV09sOEYvdUdKRE1McFR6eTU2OWNQRVo=

I tried to encode my password on but cannot see matched method.

Could you show me what is encryption method here or how to find it in openldap configuration?



share|improve this question
up vote 2 down vote accepted

The "=" on the end suggests that the password is base64 encoded. Once the base64 is decoded you will see:


This means your password is stored as a SHA1 with salt. The actual hash is encoded in base64 again after {SSHA}.

See for details about generating a new salted SHA1.

share|improve this answer
Actually the two colons in userPassword:: indicate that the attribute value is base64 encoded, not the =. A base64 encoded string doesn't necessarily contain a = at the end (or anywhere). – daff Oct 10 '12 at 12:40
good point @daff, I didn't know that :) It only suggested to me that it was base64 encoded :) – Alastair McCormack Oct 10 '12 at 12:44
Thank you all. I am clear now. – tivalat Oct 11 '12 at 8:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.