Tag Info

Hot answers tagged


SSHA is a salted SHA-1. By default the last 4 Bytes are the salt. The output of slappasswd is '{<Hash Method>}<base64 converted hash and salt>' So in order to test, whether a plain text password is equal to the salted SHA, you need to: strip the hash method-specifier with e.g. sed. decode the base64 string extract the last 4 bytes, this is ...


Only using two different domains, I guess: [sssd] domains = userdomain, autofsdomain For the autofs domain, you can try setting some more-or-less phony id_provider, like none or local if you want to be sure to avoid retrieving users from the autofs domain.

Only top voted, non community-wiki answers of a minimum length are eligible