Samba4.9 Openldap Syncpassword problem

[Izzet Aydın]

Hello Metze,

Thanks for your quick support, i modified my python code, and 
concatenate 2 lines,

now i have

# samba-tool user getpassword deneme --attributes=virtualCryptSHA256
dn: CN=deneme,CN=Users,DC=test,DC=local
virtualCryptSHA256: 
{CRYPT}$5$UCR9V87xiEehd297$p5tWnTkQY8aLDagOtefSJ82BY66.PPc
  9Kdlss8k6fC0

Got password OK

and userPassword on openldap

{CRYPT}$5$UCR9V87xiEehd297$p5tWnTkQY8aLDagOtefSJ82BY66.PPc9Kdlss8k6fC0

and it is working.

Thank you very much.


Stefan Metzmacher

On 26-04-2019 15:26, Stefan Metzmacher wrote:
> Hi Izzet,
>
>> #samba-tool user getpassword deneme --attributes=virtualCryptSHA256
>> dn: CN=deneme,CN=Users,DC=test,DC=local
>> virtualCryptSHA256:
>> {CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM
>>   3lj3FIcsMNy0
>>
>> Got password OK
>>
>> When i run syncpassword with my python code i see on my openldap server,
>> userPassword is set
>>
>> like the following
>> {CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM
>>
>> However, when i try to verify the password or login a ldapclient, the
>> request returns wrong password.
>>
>> Where did i do wrong ? How can i change "password hash userPassword
>> schemes" to SSHA.
> It seems your sync script doesn't handle the LDIF line break,
> you should have
>
> {CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM3lj3FIcsMNy0
> instead of just
> {CRYPT}$5$gLsOvhSnbEgEqGZO$YAlFzzFMBLpUGUImyI34vI7qP3wcvaM
>
> I hope that helps...
>
> metze
>
>