On 2014-02-21 10:07, Raimo Niskanen wrote:

I guess you can use 'openssl passwd' for that,
or 'openssl passwd -1' for MD5 password
however that is tagged if allowed in LDAP...

It doesn't look like openssl passwd knows about bcrypt at all (either internally, or via crypt()). While I think ldapd would be fine with either the old DES-based crypt() hash or the MD5-based hash - you would just need to prefix it with "{CRYPT}" I think - neither of those is really a good idea for hashing passwords anymore.
--
Matthew Weigel
hacker
unique & idempot . ent

Reply via email to