LDAP. Why in olcDatabase={1}bdb.ldif i haven't got {SSHA} prefix in password but there is in slapd.conf ?.Solved

[washide]

slapd 2.4.40 ,CentOS release 6.7 (Final)

Can you help me to find reason why after migration from slapd.conf to cn=config i have password with dot in olcRootPW without prefix SSHA despite the i have in slapd.conf?


password was generated with splapasswd with default SSHA.


cut slapd.conf

Code: Select all

include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
database        bdb
suffix  "dc=teka,dc=sm,dc=edu,dc=pl"
rootdn  "cn=sisa,dc=teka,dc=sm,dc=edu,dc=pl"
[b]rootpw  {SSHA}sZfNBLHF+ssxh8a50jONUKIq0KaSKKh2[/b]

directory       /var/lib/ldap/
pidfile /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args
loglevel        3

slaptest -f slapd.conf -F /etc/openldap/slapd.d

cut olcDatabase={1}bdb.ldif

Code: Select all

# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 74024d09
dn: olcDatabase={1}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {1}bdb
olcSuffix: dc=teka,dc=sm,dc=edu,dc=pl
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=sisa,dc=teka,dc=sm,dc=edu,dc=pl
olcRootPW:: e1NTSEF9c1pmTkJMSEYrc3N4aDhhNTBqT05VS0lxMEthU0tLaDI=
olcSyncUseSubentry: FALSE
olcMonitoring: TRUE
olcDbDirectory: /var/lib/ldap/
olcDbCacheSize: 1000
olcDbChecksum: FALSE
olcDbNoSync: FALSE
olcDbDirtyRead: FALSE
olcDbIDLcacheSize: 0
olcDbLinearIndex: FALSE
olcDbMode: 0600
olcDbSearchStack: 16
olcDbShmKey: 0
olcDbCacheFree: 1
olcDbDNcacheSize: 0
structuralObjectClass: olcBdbConfig
entryUUID: aba6f160-e9e0-1036-9ad3-ad97b8953f3e
creatorsName: cn=config
createTimestamp: 20170620084617Z
entryCSN: 20170620084617.912913Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20170620084617Z

[washide]

Password in olcDatabase={1}bdb.ldif is coded aditionaly in base64.