http://bugs.skolelinux.no/show_bug.cgi?id=945
Summary: slapd lists hashed password on anonymous search
Product: Skolelinux
Version: sarge-pr03
Platform: Other
OS/Version: other
Status: NEW
Severity: normal
Priority: P2
Component: debian-edu-config
AssignedTo: [email protected]
ReportedBy: [EMAIL PROTECTED]
doing this search:
ldapsearch -LLL -h ldap -x -b ou=People,dc=skole,dc=skolelinux,dc=no \
objectClass=shadowAccount userPassword
Will list the hash of each users password
dn: uid=testa,ou=People,dc=skole,dc=skolelinux,dc=no
userPassword:: xxxxxxxxxxxxx...
dn: uid=testt,ou=People,dc=skole,dc=skolelinux,dc=no
userPassword:: xxxxxxxxxxxxx...
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
