New answers tagged

0

dn: ... changetype: modify add: attributeName attributeName: xxx - delete: attributeName attributeName: value - delete: attributeOther May also work for you. This allows multiple operations while listing the DN once.


1

If bcrypt is a valid algorithm for the underlying system it should work as part of OpenLDAP's CRYPT password storage scheme. If for instance your existing password hashes look like $2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy you should be able to set the userPassword attribute OpenLDAP to {CRYPT}$2a$10$...


0

Disable your SELINUX. Install the required certificates specified in the file: olcDatabase={2}hdb.ldif


0

In my case, I wanted the crypt salted SHA-512 algorithm hashes from the linux user accounts to be imported. So I found (Answer) What are {CRYPT} passwords and how do I generate them? which has more detail, but basically all you have to do is prepend {CRYPT} before the usual hash that looks like $6$salthere$base64hashhere. At that link they say to use some ...


1

First, looks like you're sending your password over the wire in clear text. Don't do that. Get some kind of TLS going, either starttls or LDAPS . Also, dn.base="" and dn.base="cn=Subschema" are generally controlled by a different backend than the one you'll be applying ACLs to, so you might want to check if you even need those lines where ...


Top 50 recent answers are included