<quote who="Alina Dubrovska"> > Hello! > > We use OpenLDAP 2.3.27 as a user directory for our Java application. > As LDAP API we are using "Directory SDK for Java" from Netscape (ldapjdk). > > Now I need to implement password change functionality. There will be a > standard dialog, asking user to provide current password and new password. > First of all I need to check if provided password is correct and that is > the > subject of my question. > As far as I undersnand there are 2 main approaches for password checking > task: > 1) compare provided value with actual password value somehow > 2) try to authenticate user, if successfully, then conclude that password > was correct > > Now I'm able to check password by performing compare operation. But the > point is that in the future we are going to use password hashing! I tried > to > turn hashing on by including the following option in slapd.conf: > *ppolicy_hash_cleartext* > Since that, compare operation doesn't work anymore with userPassword > attribute! I assume that it is expected behaviour. But is it possible to > check hashed passwords somehow? > > The reason why "authentication" approach seems not to be desirable in our > case is that we are going to use slapo-accesslog(5) overlay to keep track > of > last user login (bind operation) time in a system. > I worry that such a fake authentication attempt for password checking will > be recorded in accesslog database as well (I have checked and that's > true). > And that will cause wrong statistics and reports. > > Could you please help me to find a way how to check password in my > situation? >
This would be done using http://www.faqs.org/rfcs/rfc3062.html - LDAP Password Modify Extended Operation In Perl it is: http://search.cpan.org/~gbarr/perl-ldap-0.34/lib/Net/LDAP/Extension/SetPassword.pm Check what your libs provide for this. If the directory does anything with Samba Passwords, then they need to be handled seperately, obviously. Thanks, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
