Hi Chris,

 

RFC 2307 (http://www.ietf.org/rfc/rfc2307.txt) says...

 

   userPassword values MUST be represented by following syntax:

 

        passwordvalue          = schemeprefix encryptedpassword

        schemeprefix           = "{" scheme "}"

        scheme                 = "crypt" / "md5" / "sha" / altscheme

        altscheme              = "x-" keystring

        encryptedpassword      = encrypted password

 

However, this RFC is tagged “experimental”.  CA’s directory supports both upper and lower case…so I think we should change it to upper case for IBM’s sake…and hope it doesn’t break other servers. 

 

What do you think?

 

Regards,

Trudi.

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Betts
Sent: Wednesday, 29 March 2006 8:46 AM
To: BEAUSEROY Michel GC EUR
Cc: jxplorer-devel@lists.sourceforge.net
Subject: [Jxplorer-devel] Re: jxplorer 3.2 beta 2 bug

 

Cool - thanks heaps for that!

 

Does anyone know if there's a standard for this?  If we upper case it 

will it break someone else?

 

Trudi, maybe ask one of the directory-heads at CA?

 

   - Chris

 

On 29/03/2006, at 12:42 AM, BEAUSEROY Michel GC EUR wrote:

 

> Hi chris,

> 

> I've found a little bug in jxplorer 3.2 beta2

> 

> I tried to change a userpassword using SHA encryption on IBM 

> directory ldap

> serveur, and it didn't work. the password was changed but I 

> couldn't bind.

> 

> 

> I got this working by changing

> In ./src/com/ca/directory/jxplorer/editor/userpasswordeditor.java

> lines

> hexString.append("{sha}");

> and

> hexString.append("{md5}");

> 

> by

> hexString.append("{SHA}")

> and

> hexString.append("{MD5}");

> 

> by the way, when using slappasswd of openldap package,

> It generates string with encryption type ALSO in uppercase.

> So it should also work with an openldap server.

> 

> ex)

> {SHA}C5wmJdwh7wX2rU3fR8XyA4N6oyw=

> 

> Hope it will help.

> 

> Sincerely

> 

> Michel Beauseroy

 

 

 

-------------------------------------------------------

This SF.Net email is sponsored by xPML, a groundbreaking scripting language

that extends applications into web and mobile media. Attend the live webcast

and join the prime developer group breaking into this new coding territory!

http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642

_______________________________________________

Jxplorer-devel mailing list

Jxplorer-devel@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/jxplorer-devel

 

Reply via email to