Lloyd Zusman writes:

Lloyd Zusman <[EMAIL PROTECTED]> writes:

[ ... ]

Can anyone tell me what I have to do in slapd.conf (or anywhere else) in
order to tell my LDAP server that the authldap client is allowed to
change the password field ... and preferably, in a way that will not
subsequently break phpldapadmin?

OK, OK ... I found it.  I added this to slapd.conf:

  access to *
        by self write
        by anonymous auth
        by * read

Now, auth_passwd() works fine, and I can still use phpldapadmin as is.

But this brings up another issue:

When I use auth_passwd(), the new password goes in as a {CRYPT}
password, even though the original password was of type {SSHA}.
Furthermore, in slapd.conf, the following statement exists:

  password-hash   {SSHA}

Courier does not implement {SSHA}, so it falls back to something it knows.

Pick one of: {SHA}, {SHA256}, and {MD5}.


Attachment: pgp54T2MeKaFi.pgp
Description: PGP signature

Reply via email to