Password History check in openldap -


password history check in openldap not working when using sha-256 password hashing in openldap.

so sending clear text password java application openldap , storing sha-256 hashed form on own. whenever changing password, openldap storing previous password in pwdhistory. there no problem in when changing password same password used taking without throwing error. struggling make work few weeks. please me.

environment details:
openldap 2.4.38
rhel 6


following details mentioned in slapd.conf
include ../etc/openldap/schema/ppolicy.schema
password-hash {sha256}
overlay ppolicy
ppolicy_default "cn=default,ou=pwdpolicies,dc=my-domain,dc=com"
ppolicy_hash_cleartext

password policy:
dn: cn=default,ou=pwdpolicies,dc=my-domain,dc=com
objectclass: pwdpolicy
objectclass: person
objectclass: top
cn: default
sn: default
pwdattribute: userpassword
pwdminage: 0
pwdinhistory: 5
pwdfailurecountinterval: 0
pwdlockout: true
pwdlockoutduration: 0
pwdallowuserchange: true
pwdexpirewarning: 0
pwdgraceauthnlimit: 0
pwdmustchange: false
pwdsafemodify: false



kindly let me know if have give me more information nail down issue.
please please please me on this. badly need solution on this.


Comments

Popular posts from this blog

database - VFP Grid + SQL server 2008 - grid not showing correctly -

jquery - Set jPicker field to empty value -

.htaccess - htaccess convert request to clean url and add slash at the end of the url -