hi everybody,

my problem with argon2 is just the casus belli pointing to something I
actually didn't understand in the modules setup.

My configure options are:

/configure --prefix=/opt/openldap --localstatedir=/var/lib/
--enable-crypt --enable-ppolicy --with-cyrus-sasl --with-tls=openssl
--enable-modules --enable-mdb=yes --enable-argon2=yes --with-systemd
--enable-accesslog

everything compiles and builds fine.

test #83 passes:

>>>>> Starting test083-argon2 for mdb...
running defines.sh
Starting slapd on TCP/IP port 9011...
Using ldapsearch to check that slapd is running...
Adding basic structure...
Testing ldapwhoami as cn=argon2,dc=example,dc=com...
dn:cn=argon2,dc=example,dc=com
>>>>> Test succeeded
>>>>> test083-argon2 completed OK for mdb after 1 seconds.

$ /opt/openldap/sbin/slappasswd -o
module-load=/opt/src/openldap-2.5.4/servers/slapd/pwmods/argon2.la -h
{ARGON2} -s test
{ARGON2}$argon2i$v=19$m=4096,t=3,p=1$n/QsZfaaYWA7pcQmAPrq8A$3FVBbO5zjMzUPRX+YW10yREA7xG4ben2gR08dGoPW1A

Without the -o module-load switch slappasswd doesn't recognize the
{ARGON2} scheme, but it looked fine to me: I believed I would need to
load the module in cn=config with a content like:

$ cat ~/ldif/load_argon2_module.ldif
dn: cn=module{1}
objectClass: olcModuleList
cn: module{1}
olcModulePath: /opt/openldap/libexec/openldap/  <- argon2.so is not here
olcModuleLoad: {0}argon2
structuralObjectClass: olcModuleList

but argon2.so is only in the src dir.

Of course I didn't understand something very basic,

thank you for your time,

Francesco

Reply via email to