Relative newb here :) I'm doing some research trying to sort out the password 
storage scheme being used on the freeipa LDAP instance.  From everything I can 
find it uses ssha but can be changed to ssha-512.  But when I try to change 
that attribute on the cn=config object like referenced here

It comes back with wrong attribute type.  I realize that doc points to the RHDS 
so it might be valid for the ipa ds?

So I guess my question is what hash is used by freeipa to store password hashes 
and is it configurable?

*** This communication may contain privileged and/or confidential information. 
It is intended solely for the use of the addressee. If you are not the intended 
recipient, you are strictly prohibited from disclosing, copying, distributing 
or using any of this information. If you received this communication in error, 
please contact the sender immediately and destroy the material in its entirety, 
whether electronic or hard copy. ***

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to