hello, thanks for your answer
I know what base64 encoding is, and I know that both attributes are in plain text :-) What I wanted to know is whether the decision to encode in base64 is done by the client or the server returning a "binary" flag or something you said "ldapsearch, always *encode* userPassword value in base64", so I guess this is the client decision to make a special case of userPassword, right? I wanted to know if the server response data in both case is the same, and while typing this I realized I could verify it by myself with ldapsearch -d -1 thanks again for taking the time to answer. best regards, Jephte CLAIN 2015-06-13 9:30 GMT+04:00 Abdelhamid Meddeb <[email protected]>: > Hi, > > Both attributes are in plain text. > > ldapsearch, always *encode* userPassword value in base64. Try: > > echo "Z290Y2hhCg==" | openssl base64 -d > > The result is gotcha too. > > Cheers. > > > Le 11/06/2015 09:48, Jephte Clain a écrit : >> >> hello, >> >> just wondering: when I ldapsearch the userPassword attribute, it is >> returned as binary: >> >> $ ldapsearch -LLL -H "ldap://xxx:389/"; -x -D xxx -W "(uid=xxx)" >> userPassword >> dn: uid=xxx,dc=domain,dc=tld >> userPassword:: Z290Y2hhCg== >> >> however, I created a new attribute with the same schema as userPassword: >> >> attributetype ( runUniv:1.1.2 >> NAME 'runUnivPassword' >> DESC 'RFC2256/2307 password for special needs' >> EQUALITY octetStringMatch >> SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} ) >> >> when I search this attribute, it is returned as text: >> >> $ ldapsearch -LLL -H "ldap://xxx:389/"; -x -D xxx -W "(uid=xxx)" >> runUnivPassword >> dn: uid=xxx,dc=domain,dc=tld >> runUnivPassword: gotcha >> >> so my question is: does ldapsearch process userPassword as a special >> case and ask for binary transfer type? >> >> or does slapd return userPassword as binary by default? if so, how do I >> configure runUnivPassword to be handled the same? >> >> thanks in advance. best regards, >> > > -- > *Abdelhamid Meddeb* > http://www.meddeb.net > -- Jephté CLAIN | Développeur, Intégrateur d'applications Service Système d'Information Direction des Systèmes d'Information Tél: +262 262 93 86 31 || Gsm: +262 692 29 58 24
