How to modify default hashing algorithm slapd v2.4.44
by young redhat from LinuxQuestions.org on (#51M8V)
Hi,
I'm running OpenLDAP V2.4.44 on a CentOS7 server and I'm getting some errors when trying to change the default hashing algorithm from SSHA to SHA-512.
I created a config file called "hash.conf" in the /etc/openldap directory and added the below data,
dn: olcDatabase={-1}frontend,cn=config
olcPasswordHash: {CRYPT}
password-crypt-salt-format "$6$%.16s"
Next I ran the cmd "ldapmodify -Y EXTERNAL -H ldapi:/// -f hash.conf"
I received the error,
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
ldapmodify: invalid format (line 3) entry: "olcDatabase={-1}frontend,cn=config"
Any idea on what I am doing wrong? Any suggestions or links to helpful articles are much appreciated.
Thanks!


I'm running OpenLDAP V2.4.44 on a CentOS7 server and I'm getting some errors when trying to change the default hashing algorithm from SSHA to SHA-512.
I created a config file called "hash.conf" in the /etc/openldap directory and added the below data,
dn: olcDatabase={-1}frontend,cn=config
olcPasswordHash: {CRYPT}
password-crypt-salt-format "$6$%.16s"
Next I ran the cmd "ldapmodify -Y EXTERNAL -H ldapi:/// -f hash.conf"
I received the error,
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
ldapmodify: invalid format (line 3) entry: "olcDatabase={-1}frontend,cn=config"
Any idea on what I am doing wrong? Any suggestions or links to helpful articles are much appreciated.
Thanks!