Topic: how to know what is in /etc/openldap/ldap.pw

[hgomez]

I'm implementing SAMBA+PDC+LDAP, all is working fine, but I don’t know what password is using to rootdn, with esmith::util::LdapPassword (); can be obtained but is possible obtain it in clear text????
Thanks.

[CharlieBrady]

I'm implementing SAMBA+PDC+LDAP, all is working fine, but I don’t know what password is using to rootdn, with esmith::util::LdapPassword (); can be obtained but is possible obtain it in clear text????
Thanks.

That is in clear text.

If you are doing development work, please discuss it (and seek help) on the devinfo mailing list.

[hgomez]

I'm implementing SAMBA+PDC+LDAP, all is working fine, but I don’t know what password is using to rootdn, with esmith::util::LdapPassword (); can be obtained but is possible obtain it in clear text????
Thanks.

That is in clear text.

If you are doing development work, please discuss it (and seek help) on the devinfo mailing list.

Ok, let me redifine my question: How I can to know what is in /etc/openldap/ldap.pw? I know I can change it, in fact is what I do, but may I using the deafault password in it? for example: If U install phpldapadmin, it take password from this file and in order to work.

right now it has: {SSHA}xo1bpqkVewUIerhhJ+4c0/SGw0aA0d2g that mean "secret".
Thanks.

[gregswallow]

AFAIK, the ldap password is also stored in /root/.my.cnf (it is the mysql root password as well).

[hmuhammad]

right now it has: {SSHA}xo1bpqkVewUIerhhJ+4c0/SGw0aA0d2g that mean "secret".
Thanks.

Not secret... rather long and hard to guess/remember...

... that long string of characters *is* the clear text password, not an encrypted representation.

Hasan

P.S.

You'll find interests/help for development of your package at http://lists.contribs.org/mailman/listinfo/devinfo

[gregswallow]

... that long string of characters *is* the clear text password, not an encrypted representation.

Are you sure about that?  On my server the password is 76 characters long, and does not contain {SSHA} at the beginning...

hgomez, Are you using 6.0.1 or 6.5beta1?  Did you update the openldap rpm?  It might also be in clear text in /etc/openldap/slapd.conf - it is on my server anyways.