Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

3
  • Not sure what is you intend, user change password using passwd on any client, then a shell script insert new password in AD ? It might be easiest (altough not that simple) to authenticate user using AD. Commented Mar 8, 2016 at 13:44
  • Yes, users change passwords using passwd on any client + shell script inserting new password in local LDAP (not AD). Linux users are not allowed in AD in our company. Our LDAP server is not high available and we do not authenticate logins against it but only some applications. As long as we used crypt, the passwords could be inserted into ldap as is and everything worked fine. With ssha512 the format in linux is different to ldap and I don't know how to convert it. Commented Mar 9, 2016 at 7:44
  • Today I created a hash with perl {SHA512}" . MIME::Base64::encode( Digest::SHA::sha512( $plainPW ), '' ) and this works with LDAP. So it is just the salt that gives me headaches. Commented Mar 9, 2016 at 11:25