Samba4.9 Openldap Syncpassword problem

[Stefan Metzmacher]

Hi Izzet,

> #samba-tool user getpassword deneme --attributes=virtualCryptSHA256
> dn: CN=deneme,CN=Users,DC=test,DC=local
> virtualCryptSHA256:
> {CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM
>  3lj3FIcsMNy0
> 
> Got password OK
> 
> When i run syncpassword with my python code i see on my openldap server,
> userPassword is set
> 
> like the following
> {CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM
> 
> However, when i try to verify the password or login a ldapclient, the
> request returns wrong password.
> 
> Where did i do wrong ? How can i change "password hash userPassword
> schemes" to SSHA.

It seems your sync script doesn't handle the LDIF line break,
you should have

{CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM3lj3FIcsMNy0
instead of just
{CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM

I hope that helps...

metze


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20190426/efd69785/signature.sig>