Help connecting to remote ldap server

Josip Rodin joy at entuzijast.net
Thu Jun 24 22:21:21 CEST 2010


On Thu, Jun 24, 2010 at 12:33:10PM -0400, John Dennis wrote:
> But even if you did, ldap has this:
>
> userPassword:: e1NIQX13ak83dXhlS3FYR0NFVlhPTEVzVUo4OW9DWFE9
>
> They aren't the same are they? The LDAP entry looks like a hash, you'll  
> have to figure out which kind. Note it does not contain a {hash} prefix  
> so FreeRADIUS can't figure what kind of hash it is.

No, the two colons in ldapsearch output just indicate that the attribute
value is MIME-encoded. It can be decoded for example with:

% echo e1NIQX13ak83dXhlS3FYR0NFVlhPTEVzVUo4OW9DWFE9 | mimencode -u
{SHA}wjO7uxeKqXGCEVXOLEsUJ89oCXQ=
% echo e1NIQX13ak83dXhlS3FYR0NFVlhPTEVzVUo4OW9DWFE9 | perl -e 'use MIME::Base64; print decode_base64(<>);'
{SHA}wjO7uxeKqXGCEVXOLEsUJ89oCXQ=

-- 
     2. That which causes joy or happiness.



More information about the Freeradius-Users mailing list