ldap - SSHA password encryption on OpenLDAP -


my current problem cannot stop openldap store passwords plaintext. in older openldap version , entered following configuration in slapd.conf

ppolicy_hash_cleartext password-hash {ssha} {sha}

so once password sent application plaintext, ldap encrypting , storing encrypted.

unfortunately not able configure openldap 2.4.40. found out slapd.conf not exist anymore in newer version , instead configuration taking place in cn=config.ldif file.

i tried add again same configuration there seems has no effect.

edit : added ldapmodify olcpasswordhash: {ssha} entry in olcbackend={0}mdb.ldif , olcdatabase={1}mdb.ldif , olcdatabase={0}config.ldif , cn=config.ldif , still passwords sent plaintext stored plaintext.

took time, figured out finally.

load schema describing ppolicy attributes.

ldapadd -y external -h ldapi:/// -f /etc/ldap/schema/ppolicy.ldif

create ppolicy_module.ldif following content , make sure ppolicy.la located under defined olcmodulepath. store file under /etc/ldap

dn: cn=module,cn=config objectclass: olcmodulelist cn: module olcmoduleload: ppolicy.la olcmodulepath: /usr/lib/ldap

add ppolicy_module.ldif

ldapadd -y external -h ldapi:/// -f ppolicy_module.ldif

create ppolicy-overlay.ldif file following content. make sure of olcdatabase number . in case olcdatabase={1}mdb . store file under /etc/ldap

dn: olcoverlay=ppolicy,olcdatabase={1}mdb,cn=config objectclass: olcppolicyconfig olcoverlay: ppolicy olcppolicydefault: cn=ppolicy,ou=policies,dc=example,dc=com olcppolicyuselockout: false olcppolicyhashcleartext: true

add ldif file.

ldapadd -y external -h ldapi:/// -f ./ppolicy-overlay.ldif

restart ldap.

more details under: https://fedorahosted.org/sssd/wiki/openldap_ppolicy


Comments

Post a Comment

Popular posts from this blog

javascript - Clear button on addentry page doesn't work -

this addentry blog page have made scratch , there underlying problems code particularly clear button supposed clear text entered when button clicked on doesn't work have saved html file problem. also 1 other problem submit button works doesn't pass of text index file have written php , reason whenever click on submit button redirects me index page without posting entry have made. <!doctype html> <html> <head> <script> function message() { alert("clear form?"); } </script> <style> body {background-color: beige;} h1 {color: black;} p {color: black;} textarea { width: 50%; height: 150px; padding: 12px 20px; box-sizing: border-box; border: 2px solid #ccc; border-radius: 4px; background-color: white; font-size: 16px; resize: none; } div { padding-left: 20px; } </style> </head> <meta charset="utf-8"> <link rel="stylesheet" href=".
Read more

c# - Selenium Authentication Popup preventing driver close or quit -

i have selenium automated task setup login website retrieve information. it's basic in automation. logging in , clicking 2 links. running issue proving problem. the site in question uses authentication required popup not javascript popup rather regular windows auth popup. have read isn't handled out of box selenium. i using " http://username:password@url.com " site every , site has issues on end prompt me again username/password randomly. have enter username/password twice in row when navigating there hand. since task loops continuously few hours picking needed info figured use webdriverwait verify element present on page. if authentication popup appears, element isn't present. no need care run, start over. the problem having when authentication popup displayed , hit timeout limit want close driver/browser window can start task on again. however, driver.close() , driver.quit() not doing anything. browser remains open , unloaded page still there login p
Read more

tensorflow when input_data MNIST_data , zlib.error: Error -3 while decompressing: invalid block type -

i'm geting started tensorflow,followed tutorials,but cannot download mnist data. import tensorflow tf tensorflow.examples.tutorials.mnist import input_data mnist=input_data.read_data_sets("mnist_data/",one_hot=true) print("download done!") error information: extracting mnist_data/train-images-idx3-ubyte.gz traceback (most recent call last): file "/home/sj/program/tesorflow_try.py", line 6, in <module> mnist=input_data.read_data_sets("mnist_data/",one_hot=true) file "/usr/local/lib/python2.7/dist-packages/tensorflow/contrib/learn/python/learn/datasets/mnist.py", line 213, in read_data_sets train_images = extract_images(f) file "/usr/local/lib/python2.7/dist-packages/tensorflow/contrib/learn/python/learn/datasets/mnist.py", line 60, in extract_images buf = bytestream.read(rows * cols * num_images) file "/usr/lib/python2.7/gzip.py", line 268, in read self._read(readsize) file
Read more