« Return to Thread: migrating from crypt to md5

migrating from crypt to md5

by Piotr KUCHARSKI :: Rate this Message:

Reply to Author | View in Thread

Hello,

I have nicely running Solaris 9 with 40k+ users authenticating
(with the help of pam_ldap) against OpenLDAP on another server
using clear passwords over SSL.

Attribute userPassword is (after migration from /etc/shadow) in
{crypt} format.

Is there an easy way to slowly migrate to {md5} passwords?

I was trying to manually put {md5} password in userPassword (19 chars
long, because that's the motive for change), but then given user does
not authenticate anymore. I thought slowly putting md5 passwords in
userPassword would suffice (I have own WWW interface for changing
passwords where it would be very easy to do), but I cannot ldap_bind()
with a password that is kept in {md5} format in userPassword.

Any hints?

p.

--
Beware of he who would deny you access to information, for in his
heart he dreams himself your master.   -- Commissioner Pravin Lal

 « Return to Thread: migrating from crypt to md5