<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> That sounds reasonable; but it doesn't appear to work. Let me go into the details a little more: <ol> <li>FDS + Samba3 on one server with user's passwords stored as SSHA Hashed values.</li> <li>New OpenLDAP install on a different server (used by other services on that machine, and no they won't play nice w/ external ldap server); this server is also setup (already) to store passwords using SSHA. </li> <li>We want to copy the hashed password value from FDS and put in it into the OpenLDAP server as the userPassword attribute for the users; however the other server is using a different sha seed, therefore when it tries to compare the value entered by the user to the stored value it fails (as it is using its own seed to re-hash the password and do the comparison).</li> </ol> So that's where we stand. Currently have been told to simply set all users in the OpenLDAP to a default value and make them reset their passwords on that server if they want to. Mike Jackson wrote: <blockquote cite="mid4475F5A5.5020407@sci.fi" type="cite">Robert r. Sanders wrote: <blockquote type="cite">Yeah, but what I want to do is copy the HASH from one server to the other. </blockquote> In that case, you don't need to do anything. If you have FDS set to do hashing in SSHA, and you send a cleartext string as a userPassword modify, then FDS SSHA hashes it for you. If you send a string prefixed with {SSHA} as a userPassword modify, FDS does not hash it for you. -- mike -- Fedora-directory-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/fedora-directory-users">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a> </blockquote> <pre class="moz-signature" cols="72">-- Robert r. Sanders Chief Technologist iPOV (334) 821-5412 <a class="moz-txt-link-abbreviated" href="http://www.ipov.net">www.ipov.net</a> </pre> </body> </html>