Article 5FPBF Debian 10 x86_64 vanilla, openldap, slappasswd, can't use SSHA512

Debian 10 x86_64 vanilla, openldap, slappasswd, can't use SSHA512

by
Linux.tar.gz
from LinuxQuestions.org on (#5FPBF)
Hi,

The ldap install is very simple.
I can use slappasswd without options, the password changes and I can use ldapsearch.
But if I use:
Code:slappasswd -h '{SSHA512}' -o module-load=pw-sha2.la -o module-path=/usr/lib/ldapand
Code:#ldapmodify -Y EXTERNAL -H ldapi:///

dn: olcDatabase={0}config,cn=config
changetype: modify
replace: olcRootPW
olcRootPW: the_pass_given_by_slappasswdthe password changes, but the new one gives an
Code:# ldapsearch -x -H ldap://127.0.0.1 -b "dc=example,dc=com" -D cn=admin,cn=config -W
Enter LDAP Password:
ldap_bind: Invalid credentials (49)Code:[23-03-2021 12:46:35] slapd debug conn=1017 fd=12 ACCEPT from IP=127.0.0.1:45416 (IP=0.0.0.0:389)
[23-03-2021 12:46:35] slapd debug conn=1017 op=0 BIND dn="cn=admin,cn=config" method=128
[23-03-2021 12:46:35] slapd debug conn=1017 op=0 RESULT tag=97 err=49 text=
[23-03-2021 12:46:35] slapd debug conn=1017 op=1 UNBIND
[23-03-2021 12:46:35] slapd debug conn=1017 fd=12 closedI checked:
Code:# find / -name "pw-sha2.la"
/usr/lib/ldap/pw-sha2.laAny idea ?latest?d=yIl2AUoC8zA latest?i=xTtFhzy6--Y:QERAFpF-K5A:F7zBnMy latest?i=xTtFhzy6--Y:QERAFpF-K5A:V_sGLiP latest?d=qj6IDK7rITs latest?i=xTtFhzy6--Y:QERAFpF-K5A:gIN9vFwxTtFhzy6--Y
External Content
Source RSS or Atom Feed
Feed Location https://feeds.feedburner.com/linuxquestions/latest
Feed Title LinuxQuestions.org
Feed Link https://www.linuxquestions.org/questions/
Reply 0 comments