Package: slapd Version: 2.4.31-1+nmu2 Severity: important Tags: upstream Dear Maintainer,
I ran into a particularly vexing problem with OpenLDAP: I populated a user record with a SSHA-512 user password via Apache Directory Studio and could verify that the password was correct, but I always got an "invalid credentials" error when trying to bind with that dn and password. As a workaround, I changed the userPassword fromat to SSHA, and was able to bind successfully. Could you please build and include this module with the slapd package? https://github.com/gcp/openldap/tree/master/contrib/slapd-modules/passwd/sha2 Furthermore, would you please consider loading it by default when debconf builds a new slapd.d? Both actions would greatly improve the security and usability of OpenLDAP on Debian. Best regards, Mike Przybylski -- System Information: Debian Release: 7.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages slapd depends on: ii adduser 3.113+nmu3 ii coreutils 8.13-3.5 ii debconf [debconf-2.0] 1.5.49 ii libc6 2.13-38+deb7u1 ii libdb5.1 5.1.29-5 ii libgcrypt11 1.5.0-5+deb7u1 ii libgnutls26 2.12.20-8+deb7u1 ii libldap-2.4-2 2.4.31-1+nmu2 ii libltdl7 2.4.2-1.1 ii libodbc1 2.2.14p2-5 ii libperl5.14 5.14.2-21+deb7u1 ii libsasl2-2 2.1.25.dfsg1-6+deb7u1 ii libslp1 1.2.1-9 ii libwrap0 7.6.q-24 ii lsb-base 4.1+Debian8+deb7u1 ii multiarch-support 2.13-38+deb7u1 ii perl [libmime-base64-perl] 5.14.2-21+deb7u1 ii psmisc 22.19-1+deb7u1 Versions of packages slapd recommends: ii libsasl2-modules 2.1.25.dfsg1-6+deb7u1 Versions of packages slapd suggests: ii ldap-utils 2.4.31-1+nmu2 -- debconf information: slapd/internal/generated_adminpw: (password omitted) * slapd/password2: (password omitted) slapd/internal/adminpw: (password omitted) * slapd/password1: (password omitted) slapd/allow_ldap_v2: false slapd/password_mismatch: slapd/invalid_config: true shared/organization: mprzybylski.corp.appdynamics.com slapd/upgrade_slapcat_failure: slapd/no_configuration: false slapd/move_old_database: true slapd/dump_database_destdir: /var/backups/slapd-VERSION slapd/purge_database: false slapd/domain: mprzybylski.corp.appdynamics.com slapd/backend: HDB slapd/dump_database: when needed -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
