slappasswd - OpenLDAP password utility


SYNOPSIS

       /usr/sbin/slappasswd [-v] [-u] [-s secret] [-h hash]


DESCRIPTION

       Slappasswd is used to generate an userPassword value suit­
       able for use with ldapmodify(1)  or  slapd.conf(5)  rootpw
       coniguration directive.


OPTIONS

       -v     enable verbose mode.  -u generate RFC2307 userPass­
              word values (the default).  Future versions of this
              program   may   generate  alternative  syntaxes  by
              default.  This option is provided for forward  com­
              patibility.

       -s secret
              The secret to hash.  If not provided, the user will
              be prompted for the secret to hash.

       If -h is specified, one of the following RFC2307 schemes
              may
              be  specified:  {CRYPT}, {MD5}, {SMD5}, {SSHA}, and
              {SHA}.  The default is {SSHA}.


LIMITATIONS

       The practice storing hashed passwords in userPassword vio­
       lates  Standard  Track (RFC2256) schema specifications and
       may hinder interoperability.  A new attribute type to hold
       hashed passwords is needed.


SECURITY CONSIDERATIONS

       Use  of hashed passwords does not protect passwords during
       protocol transfer.  TLS or other eavesdropping protections
       should  be  inplace  before  using  LDAP simple bind.  The
       hashed password values should be protected as if they were
       clear text passwords.


SEE ALSO

       ldappasswd(1), ldapmodify(1), slapd(8) slapd.conf(5)

       "OpenLDAP    Administrator's   Guide"   (http://www.OpenL­
       DAP.org/doc/admin/)


ACKNOWLEDGEMENTS

       OpenLDAP is developed and maintained by The OpenLDAP  Pro­
       ject (http://www.openldap.org/).  OpenLDAP is derived from
       University of Michigan LDAP 3.3 Release.


Man(1) output converted with man2html