From: Kurt Zeilenga Date: Tue, 30 Dec 2003 01:37:38 +0000 (+0000) Subject: crypt(3) is not portable... X-Git-Tag: OPENLDAP_REL_ENG_2_1_MP~79 X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=b613a3d57d38e72674521127e073ca6c55e06df5;p=openldap crypt(3) is not portable... --- diff --git a/doc/man/man8/slappasswd.8 b/doc/man/man8/slappasswd.8 index 737689fbc1..931e46a527 100644 --- a/doc/man/man8/slappasswd.8 +++ b/doc/man/man8/slappasswd.8 @@ -102,11 +102,16 @@ interoperability. A new attribute type, authPassword, to hold hashed passwords has been defined (RFC 3112), but is not yet implemented in .BR slapd (8). +.TP +It should also be noted that the behavior of +.BR crypt (3) +is platform specific. .SH "SECURITY CONSIDERATIONS" Use of hashed passwords does not protect passwords during protocol transfer. TLS or other eavesdropping protections -should be inplace before using LDAP simple bind. The -hashed password values should be protected as if they +should be in\-place before using LDAP simple bind. +.TP +The hashed password values should be protected as if they were clear text passwords. .SH "SEE ALSO" .BR ldappasswd (1),