slappasswd - OpenLDAP password utility
SYNOPSIS
/usr/sbin/slappasswd [-v] [-u] [-s secret] [-h hash]
DESCRIPTION
Slappasswd is used to generate an userPassword value suit
able for use with ldapmodify(1) or slapd.conf(5) rootpw
coniguration directive.
OPTIONS
-v enable verbose mode. -u generate RFC2307 userPass
word values (the default). Future versions of this
program may generate alternative syntaxes by
default. This option is provided for forward com
patibility.
-s secret
The secret to hash. If not provided, the user will
be prompted for the secret to hash.
If -h is specified, one of the following RFC2307 schemes
may
be specified: {CRYPT}, {MD5}, {SMD5}, {SSHA}, and
{SHA}. The default is {SSHA}.
LIMITATIONS
The practice storing hashed passwords in userPassword vio
lates Standard Track (RFC2256) schema specifications and
may hinder interoperability. A new attribute type to hold
hashed passwords is needed.
SECURITY CONSIDERATIONS
Use of hashed passwords does not protect passwords during
protocol transfer. TLS or other eavesdropping protections
should be inplace before using LDAP simple bind. The
hashed password values should be protected as if they were
clear text passwords.
SEE ALSO
ldappasswd(1), ldapmodify(1), slapd(8) slapd.conf(5)
"OpenLDAP Administrator's Guide" (http://www.OpenL
DAP.org/doc/admin/)
ACKNOWLEDGEMENTS
OpenLDAP is developed and maintained by The OpenLDAP Pro
ject (http://www.openldap.org/). OpenLDAP is derived from
University of Michigan LDAP 3.3 Release.
Man(1) output converted with
man2html