<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Simo Sorce wrote:
<blockquote cite="mid:1214495491.3822.192.camel@localhost.localdomain"
type="cite">
<pre wrap="">On Thu, 2008-06-26 at 11:14 -0400, John Dennis wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Nalin Dahyabhai wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Would it be useful to also intercept the password used when a simple or
SASL/PLAIN bind requests succeed, and take the opportunity to generate
the hashes so that we can avoid forcing password changes?
</pre>
</blockquote>
<pre wrap="">How do you plan to intercept the plain text password in IPA? We aren't
in control of the services a user is likely to issue a SASL/PLAIN bind
to are we?
</pre>
</blockquote>
<pre wrap=""><!---->
We control the LDAP server, that's the only SASL/PLAIN bind we care
about.
</pre>
</blockquote>
Right, but when and in what context are users doing a plain bind to our
LDAP server? Wouldn't this be very atypical?<br>
<pre class="moz-signature" cols="72">--
John Dennis <a class="moz-txt-link-rfc2396E" href="mailto:jdennis@redhat.com"><jdennis@redhat.com></a>
</pre>
</body>
</html>