2000-08-19 21:00:12 -04:00
|
|
|
.TH SLAPPASSWD 8C "20 August 2000" "OpenLDAP LDVERSION"
|
2000-06-16 02:43:55 -04:00
|
|
|
.\" $OpenLDAP$
|
|
|
|
|
.\" Copyright 1998-2000 The OpenLDAP Foundation All Rights Reserved.
|
|
|
|
|
.\" Copying restrictions apply. See COPYRIGHT/LICENSE.
|
|
|
|
|
.SH NAME
|
2000-07-22 14:32:33 -04:00
|
|
|
slappasswd \- OpenLDAP password utility
|
2000-06-16 02:43:55 -04:00
|
|
|
.SH SYNOPSIS
|
|
|
|
|
.B SBINDIR/slappasswd
|
2000-08-25 01:31:59 -04:00
|
|
|
.B [\-u]
|
2000-06-16 02:43:55 -04:00
|
|
|
.B [\-v]
|
|
|
|
|
.B [\-s secret]
|
|
|
|
|
.B [\-h hash]
|
|
|
|
|
.B
|
|
|
|
|
.LP
|
|
|
|
|
.SH DESCRIPTION
|
|
|
|
|
.LP
|
|
|
|
|
.B Slappasswd
|
2000-08-25 01:31:59 -04:00
|
|
|
is used to generate an authPassword (or userPassword) value
|
|
|
|
|
suitable for use with
|
|
|
|
|
.BR ldapmodify (1)
|
|
|
|
|
or
|
2000-06-16 02:43:55 -04:00
|
|
|
.BR slapd.conf (5)
|
2000-08-25 01:31:59 -04:00
|
|
|
.I rootpw
|
|
|
|
|
coniguration directive.
|
2000-06-16 02:43:55 -04:00
|
|
|
.SH OPTIONS
|
|
|
|
|
.TP
|
2000-08-25 01:31:59 -04:00
|
|
|
.B \-u
|
|
|
|
|
generate RFC2307 userPassword values instead of authPassword values.
|
2000-07-22 14:32:33 -04:00
|
|
|
.TP
|
2000-06-16 02:43:55 -04:00
|
|
|
.B \-v
|
|
|
|
|
enable verbose mode.
|
|
|
|
|
.TP
|
|
|
|
|
.BI \-s " secret"
|
|
|
|
|
The secret to hash. If not provided, the user will be prompted
|
|
|
|
|
for the secret to hash.
|
|
|
|
|
.TP
|
2000-07-22 14:32:33 -04:00
|
|
|
.BI \-h " scheme"
|
2000-08-25 01:31:59 -04:00
|
|
|
The hash scheme to use. One of the following authPassword schemes
|
|
|
|
|
may be specified:
|
|
|
|
|
.IR MD5 ,
|
|
|
|
|
.IR SHA1 ", and"
|
|
|
|
|
.IR X-CRYPT .
|
|
|
|
|
The default is
|
|
|
|
|
.IR SHA1 .
|
|
|
|
|
If -u is specified, one of the following RFC2307 schemes may
|
|
|
|
|
be specified:
|
2000-06-16 02:43:55 -04:00
|
|
|
.IR {CRYPT} ,
|
|
|
|
|
.IR {MD5} ,
|
|
|
|
|
.IR {SMD5} ,
|
|
|
|
|
.IR {SSHA} ", and"
|
|
|
|
|
.IR {SHA} .
|
|
|
|
|
The default is
|
|
|
|
|
.IR {SSHA} .
|
2000-07-22 14:32:33 -04:00
|
|
|
.LP
|
2000-06-16 02:43:55 -04:00
|
|
|
.SH LIMITATIONS
|
2000-08-25 01:31:59 -04:00
|
|
|
The authPassword attribute type is not yet widely supported.
|
|
|
|
|
The practice storing hashed passwords in userPassword violates
|
|
|
|
|
Standard Track schema and may hinder interoperability.
|
2000-06-16 02:43:55 -04:00
|
|
|
.SH "SECURITY CONSIDERATIONS"
|
|
|
|
|
Use of hashed passwords does not protect passwords during
|
|
|
|
|
protocol transfer. TLS or other eavesdropping protections
|
|
|
|
|
should be inplace before using LDAP simple bind. The
|
|
|
|
|
hashed password values should be protected as if they
|
|
|
|
|
were clear text passwords.
|
|
|
|
|
.SH "SEE ALSO"
|
2000-07-22 14:32:33 -04:00
|
|
|
.BR ldappasswd (1),
|
|
|
|
|
.BR ldapmodify (1),
|
2000-06-16 02:43:55 -04:00
|
|
|
.BR slapd (8)
|
2000-08-25 01:31:59 -04:00
|
|
|
.BR slapd.conf (5)
|
2000-08-13 18:06:01 -04:00
|
|
|
.LP
|
2000-08-24 19:18:06 -04:00
|
|
|
"OpenLDAP Administrator's Guide" (http://www.OpenLDAP.org/doc/admin/)
|
2000-06-16 02:43:55 -04:00
|
|
|
.SH ACKNOWLEDGEMENTS
|
2000-08-25 01:31:59 -04:00
|
|
|
OpenLDAP is developed and maintained by
|
|
|
|
|
The OpenLDAP Project (http://www.openldap.org/).
|
|
|
|
|
OpenLDAP is derived from University of Michigan LDAP 3.3 Release.
|
