Subject: Re: [netatalk-admins] shared Logins on UNIX/Mac?
From: Osma Ahvenlampi (oa@spray.fi)
Date: Wed Aug 12 1998 - 18:10:32 EDT
Will Cox <wcox@imageinc.com> writes:
> On the other hand, the password in most LDAP directories is stored and
> passed over the wire in the clear (unless SSL is used, in which case it's
> only stored in the clear). The only exception to this that I know of is
Netscape Directory Server stores passwords as UNIX crypt() or SHA hash
values. Similar patches are available for UMich slapd as well. Both
still expect the password to be sent in the clear.
In fact, the support in these requires that you store the password has
hash string in the form "{crypt}e3HTnV/p4DaC.", and will then be able
to compare the password given in the bind request to the hash
value. So it does require specific support from the client software
used to set the password, but not from clients which simply try to
bind using a predetermined password.
-- Drilling for oil is boring. Osma Ahvenlampi <oa@spray.fi>
This archive was generated by hypermail 2b28 : Sat Dec 18 1999 - 16:33:04 EST