[Samba] exop vs md5

[José M. Fandiño]

taso wrote:
> 
> WHat is the significance to Samba of pam_password exop vs pam_password md5 in ldap.conf?

the difference is who does the password hash. AFAIK with md5 the ldap client 
is responsible of hash generation whilst with exop (EXtended OPeraion) the operation 
is left to the ldap server, this open a new world of opportunities since the ldap 
server can hash the userPassword, sambapassword, kerberos password and any future 
password at the same time, only one update is neccesary and all your passwords will
be in sync.

see:
http://mirrors.isc.org/pub/www.watersprings.org/pub/id/draft-zeilenga-ldap-passwd-exop-03.txt

-- 
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/IT d- s+:+() a31 C+++ UBL+++$ P+ L+++ E--- W++ N+ o++ K- w---
O+ M+ V- PS+ PE+ Y++ PGP+>+++ t+ 5 X+$ R- tv-- b+++ DI D++>+++
G++ e- h+(++) !r !z
------END GEEK CODE BLOCK------