Re: Retrieving password entry from iPlanet with Net::LDAP::get_value

[<ma...@mj...>]

Hi,
Most likely it's a permission problem. By default with IPlanet, only 
the directory administrator account can read userPassword.

Which leads to my next point. Why in the @#%!@#% are you 
trying to read the userPassword?

If it's for authentication, that's a bad road to follow. You should be 
using a bind instead. 

Reading the password causes you to transport the encrypted user 
password across the network and it also means you're avoiding 
using any of the LDAP server's authentication safeguards (for 
example with IPlanet, you can do things like account expiration 
that are only enforced on a bind). 

Mark

On 4 May 02, at 1:54, Markus Preller wrote:

> Hello,
> 
> when I try to retrieve the userPassword attribute
> (which is in crypt format by the way) from a iPlanet-
> based directory using the Net::LDAP::Entry->attributes 
> and Net::LDAP::Entry->get_value function I get an undefined
> result. Checking the existence of the attribute I get a
> positive feedback.
> 
> Doing the same thing on a OpenLDAP-based directory I get
> the expected result in a way of {crypt}somekindohash.
> 
> What's the problem with the iPlanet server ?
> 
> Could anybody help me out of this ?
> 
> bye
> Markus Preller
> 
> 
> _______________________________________________________________
> 
> Have big pipes? SourceForge.net is looking for download mirrors. We
> supply the hardware. You get the recognition. Email Us:
> ban...@so...
> 
> 


Mark Wilcox
ma...@mj...
Got LDAP?