Re: issues with password encryption changes after upgrade

[Mark Reynolds <mreynolds@xxxxxxxxxx>]

On 10/31/18 1:25 PM, Ghiurea, Isabella wrote:

Hi list,

we upgrade from1.3.5.15-1.fc24, to  1.3.7.5-24.el7 

What platform are you on now?  Do you see any errors in the errors log when the server starts up?

, this a multi master replication environment  we are seeing the paswd encryption for new users in new  389-DS  has been changed and is causing some grief , both version have the start of passwd same string :'e1NTSE"  , BUT  the latest  389-DS e has one additional new line . Is there anything we can do to have same encryption pattern ?

What do you mean by one additional line?

What is actually breaking and causing you grief?  

What does this search return:

ldapsearch -D "cn=directory manager" -xLLL -W -b cn=config -s base objectclass=top passwordStorageScheme

It probably returns:

     passwordStorageScheme: PBKDF2_SHA256

This is a more secure hashing algorithm for user passwords than the previous default scheme "SSHA512".  You can change the passwordStorageScheme to any scheme you want, but it will be less secure than PBKDF2_SHA256. 

Regards,

Mark

Thank you

_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx

_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx