Re: [389-users] SSHA and friends

Ulf Weltman <ulf.weltman@xxxxxx> · Wed, 22 Sep 2010 11:55:21 -0700



    On 9/22/2010 11:33 AM, Nathan Kinder wrote:
    
      
      On 09/22/2010 10:45 AM, Gerrard Geldenhuis wrote:
      
        
          Hi
          This is probably OT but I am not having
            much
            luck with google.
            How can I create SSHA512 strings? I have been using either a
            php script
            or slappasswd
            to create SSHA password but not sure how to do SSHA512.
            openssl can
            create the
            SHA512 digest but I am not sure how to add the random seed
            bit. My
            question probably
            illuminate my lack of understanding of the subject.
        
      
      Why are you pre-hashing passwords?  You can set the password
      storage
      scheme to SSHA512 in 389 and provide a cleartext userPassword
      value to
      the server and it will hash it for you.

    
    If generating LDIF with pre-hashed passwords or resetting a lost
    nsslapd-rootpw or something like that, you can use the pwdhash
    utility that comes with 389 DS:

    
    # pwdhash -s SSHA512 secret12

{SSHA512}KssX4qTpaFxJveSJp8Dw5AXTgNmM3wYrmBLspsj6F+Pf2aN6WO0l8XUQy+z2zx8qknO+ToFFjkVae8f4oYX0Xlt1elA2UHKq

    
          Best Regards
        
        
________________________________________________________________________

        In order to protect our email recipients, Betfair Group use
        SkyScan
        from 

        MessageLabs to scan all Incoming and Outgoing mail for viruses.

        
________________________________________________________________________

        
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
      
      
<<attachment: smime.p7s>>
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users