we have a need for 389 directory to store password in clear text, in given subtree. I have used the console to configure password policy and chose CLEAR for the encryption scheme under passwordStorageScheme, yet the passwords are still SSHA encrypted. Is there any other thing that I should do.
objectClass: ldapsubentry
objectClass: passwordpolicy
objectClass: top
cn: cn=nsPwPolicyEntry,cn=users,cn=subscribers,dc=ourc ompany,dc=com
passwordMustChange: off
passwordExp: off
passwordHistory: on
passwordMinAge: 0
passwordChange: off
passwordStorageScheme: clear
passwordInHistory: 3
passwordLockout: on
passwordLockoutDuration: 21600
passwordResetFailureCount: 1800
passwordUnlock: on
passwordMaxFailure: 3
There is also an attribute pwdpolicysubentry: cn=cn3DnsPwPolicyEntry2Ccn3Dusers2Ccn3Daccounts2Cd c3Dourcompany2Cdc3Dcom,cn=nsPwPolicyContainer,cn=u sers,cn=accounts,dc=ourcompany,dc=com
that shows up in the testuser's profile from the console that does not show up in the ldif dump.
Please help I have followed the documentation Redhat directory 8.2
thanks
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
10-29-2010, 03:45 PM
Nathan Kinder
In need of Storing Cleartext Password
On 10/29/2010 08:28 AM, Uzor Ide wrote:
Hi
we have a need for 389 directory to store password in clear text, in
given subtree. I have used the console to configure password policy and
chose CLEAR for the encryption scheme under passwordStorageScheme, yet
the passwords are still SSHA encrypted. Is there any other thing that I
should do.
You need to check the "Enable fine-grained password policies" checkbox
in the global password policy section in the Console.
There is also an attribute pwdpolicysubentry:
cn=cn3DnsPwPolicyEntry2Ccn3Dusers2Ccn3Daccounts2Cd c3Dourcompany2Cdc3Dcom,cn=nsPwPolicyContainer,cn=u sers,cn=accounts,dc=ourcompany,dc=com
that shows up in the testuser's profile from the console that does not
show up in the ldif dump.
Please help I have followed the documentation Redhat directory 8.2
thanks
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
10-29-2010, 08:28 PM
Uzor Ide
In need of Storing Cleartext Password
Thanks Nathan,
I missed that entirely
Ide
2010/10/29 Nathan Kinder <nkinder@redhat.com>
On 10/29/2010 08:28 AM, Uzor Ide wrote:
Hi
we have a need for 389 directory to store password in clear text, in
given subtree. I have used the console to configure password policy and
chose CLEAR for the encryption scheme under passwordStorageScheme, yet
the passwords are still SSHA encrypted. Is there any other thing that I
should do.
You need to check the "Enable fine-grained password policies" checkbox
in the global password policy section in the Console.
There is also an attribute pwdpolicysubentry:
cn=cn3DnsPwPolicyEntry2Ccn3Dusers2Ccn3Daccounts2Cd c3Dourcompany2Cdc3Dcom,cn=nsPwPolicyContainer,cn=u sers,cn=accounts,dc=ourcompany,dc=com
that shows up in the testuser's profile from the console that does not
show up in the ldif dump.
Please help I have followed the documentation Redhat directory 8.2
thanks
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
In need of Storing Cleartext Password
