Kurt D. Zeilenga wrote:
At 11:57 AM 12/19/2005, Jim Boden wrote:
Is there a way to force openldap to hash the  userPassword entry if the client 
does not?

As distributed, no.  slapd(8) preserves the value of userPassword
precisely as presented.
 But if the client does not use exop, is there anything we can do to force a 
hash?

One could, I guess, write an overlay to hash the value on
behalf of the client.

The ppolicy overlay has a config option to force hashing on Modifies and Adds. See slapo-ppolicy(5).

--
 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 OpenLDAP Core Team            http://www.openldap.org/project/

Reply via email to