At 05:55 PM 12/8/2005, Christophe Gravier wrote: >Kurt D. Zeilenga wrote: > >>slapd(8) should check the asserted password against each >>value of userPassword. >> >> >It seems it is not true :-( > >With more tests, it seems it authentificate against a random pick between the >two userPassword (not forcely always the last updated)
Well, I suggest that you document a method to duplicate the problem using only OpenLDAP Software (e.g., slapd and ldapwhoami) and then submit a bug report with this information. Be sure to use the latest version of OpenLDAP Software. Kurt >Christophe. > >>Kurt >> >>At 01:36 PM 12/8/2005, Christophe Gravier wrote: >> >> >>>Hello, >>> >>>I am sorry if it has already covered by I hadn't find any information about >>>my question in ml archive. >>> >>>I want to be able to offer the possibility to my users to have 2 different >>>userPassword attributes: one for rich application client authentification >>>(the one that already exist actually) and another for authentification from >>>phones. >>>(I want it easier to enter one's password from a cellular, just like a pin >>>or something ...) >>> >>>I know userPassword is a multiple attribute field (it has been covered in a >>>previous thread). >>>But ! >>> >>>On my OpenLdap instance (Debian etch testing, slapd -V gives me : OpenLDAP: >>>slapd 2.2.26 (Oct 31 2005 09:10:53). >>> >>>let's say I have a userPassword filed values pass1 and another set to pass2 >>>(SHA-2 hash). >>> >>>I'm only able to get authentificated against one single password, in fact >>>the last edited. >>>If I set userPassword to pass1 then the other attribute userPassword to >>>pass2, then only authentification with pass2 works. Consequently, if I set >>>pass2 for one userPassword attribute then pass1 for the other userPassword >>>attribute, only authentification with pass1 works. >>> >>>Is there any configuration I should set to get userPassword authentification >>>against one or the other userPassword ? Did I missed something in the manual >>>or slapd.conf ? (I didn't find something regarding this particular issue). >>> >>>Thanks in advance, >>> >>>Best Regards, >>> >>>-- Christophe Gravier >>>Laboratoire DIOM, groupe SATIn - Doctorant >>>ISTASE - Ingénieur d'études >>>Perso: http://perso.univ-st-etienne.fr/gravchri/ >>>SATIn: http://www.istase.com/satin >>>Tel : 04 7748 5034 >>>A mediter: http://www.fsffrance.org/news/article2005-11-25.fr.html >>> >> >> > > >-- >Christophe Gravier >Laboratoire DIOM, groupe SATIn - Doctorant >ISTASE - Ingénieur d'études >Perso: http://perso.univ-st-etienne.fr/gravchri/ >SATIn: http://www.istase.com/satin >Tel : 04 7748 5034 >A mediter: http://www.fsffrance.org/news/article2005-11-25.fr.html
