LDAP encrypt attribute that extends userpassword

Posted by Foezjie on Server Fault See other posts from Server Fault or by Foezjie
Published on 2012-08-30T16:42:35Z Indexed on 2012/09/03 9:40 UTC
Read the original article Hit count: 217

Filed under:

In my current LDAP schema I have an objectclass (let's call it group) that has 2 attributes that extend userpassword. Like this:

attributeType ( groupAttributes:12 NAME 'groupPassword1'        
    SUP userPassword
    SINGLE-VALUE )

attributeType ( groupAttributes:13 NAME 'groupPassword2'        
        SUP userPassword
        SINGLE-VALUE )

group extends organisation so already has a userpassword attribute. If I use that to enter a new group using PHPLDAPAdmin it uses SSHA (by default) and encrypts/hashes the password I entered. But the passwords I entered for groupPassword1 en groupPassword2 don't get encrypted.

Is there a way to make it so that those attributes are encrypted too?

© Server Fault or respective owner

Related posts about ldap