New answers tagged openldap
0
dn: ...
changetype: modify
add: attributeName
attributeName: xxx
-
delete: attributeName
attributeName: value
-
delete: attributeOther
May also work for you. This allows multiple operations while listing the DN once.
1
If bcrypt is a valid algorithm for the underlying system it should work as part of OpenLDAP's CRYPT password storage scheme.
If for instance your existing password hashes look like $2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy you should be able to set the userPassword attribute OpenLDAP to {CRYPT}$2a$10$...
0
Disable your SELINUX.
Install the required certificates specified in the file:
olcDatabase={2}hdb.ldif
0
In my case, I wanted the crypt salted SHA-512 algorithm hashes from the linux user accounts to be imported. So I found (Answer) What are {CRYPT} passwords and how do I generate them? which has more detail, but basically all you have to do is prepend {CRYPT} before the usual hash that looks like $6$salthere$base64hashhere.
At that link they say to use some ...
1
First, looks like you're sending your password over the wire in clear text. Don't do that. Get some kind of TLS going, either starttls or LDAPS .
Also, dn.base="" and dn.base="cn=Subschema" are generally controlled by a different backend than the one you'll be applying ACLs to, so you might want to check if you even need those lines where ...
Top 50 recent answers are included
