I have a 389 DS server replication agreement whith an AD Server and when I change the password in the windows side it replicates into 389 but via 389 console I can see this field "unhashed#user#password" in clear text.
How can I encrypt this field? Is it possible?
I tried the following configuration:
dn: cn=unhashed#user#password,cn=encrypted attributes,cn=userRoot,cn=ldbm database,cn=plugins,cn=configobjectClass: topobjectClass: nsAttributeEncryptioncn: unhashed#user#passwordnsEncryptionAlgorithm: AES
If I restart my server the field is gone.
The fact is that I need to avoid my admin to see the user´s password.
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users