X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=doc%2Fman%2Fman8%2Fslappasswd.8;h=ee83f09d09e98d98dd70c1604440552b4bbe4e1c;hb=71142cc7e5c2dcfa1e9789dbad56a1d489480ff9;hp=737689fbc13cd427d38c60984d6f049a60d6de9d;hpb=02028df6c61cefa48041f2e71ddf7504a28c9b23;p=openldap diff --git a/doc/man/man8/slappasswd.8 b/doc/man/man8/slappasswd.8 index 737689fbc1..ee83f09d09 100644 --- a/doc/man/man8/slappasswd.8 +++ b/doc/man/man8/slappasswd.8 @@ -1,6 +1,6 @@ .TH SLAPPASSWD 8C "RELEASEDATE" "OpenLDAP LDVERSION" .\" $OpenLDAP$ -.\" Copyright 1998-2003 The OpenLDAP Foundation All Rights Reserved. +.\" Copyright 1998-2004 The OpenLDAP Foundation All Rights Reserved. .\" Copying restrictions apply. See COPYRIGHT/LICENSE. .SH NAME slappasswd \- OpenLDAP password utility @@ -64,6 +64,12 @@ be specified: The default is .IR {SSHA} . +Note that scheme names may need to be protected, due to +.B { +and +.BR } , +from expansion by the user's command interpreter. + .B {SHA} and .B {SSHA} @@ -102,11 +108,16 @@ interoperability. A new attribute type, authPassword, to hold hashed passwords has been defined (RFC 3112), but is not yet implemented in .BR slapd (8). +.TP +It should also be noted that the behavior of +.BR crypt (3) +is platform specific. .SH "SECURITY CONSIDERATIONS" Use of hashed passwords does not protect passwords during protocol transfer. TLS or other eavesdropping protections -should be inplace before using LDAP simple bind. The -hashed password values should be protected as if they +should be in\-place before using LDAP simple bind. +.TP +The hashed password values should be protected as if they were clear text passwords. .SH "SEE ALSO" .BR ldappasswd (1),