[Bug 945] New: slapd lists hashed password on anonymous search

[bugzilla-skolelinux@developer.skolelinux.no]

http://bugs.skolelinux.no/show_bug.cgi?id=945

           Summary: slapd lists hashed password on anonymous search
           Product: Skolelinux
           Version: sarge-pr03
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: debian-edu-config
        AssignedTo: debian-edu@lists.debian.org
        ReportedBy: faj@bzz.no


doing this search:
ldapsearch -LLL -h ldap -x -b ou=People,dc=skole,dc=skolelinux,dc=no  \
                              objectClass=shadowAccount userPassword

Will list the hash of each users password

dn: uid=testa,ou=People,dc=skole,dc=skolelinux,dc=no
userPassword:: xxxxxxxxxxxxx...

dn: uid=testt,ou=People,dc=skole,dc=skolelinux,dc=no
userPassword:: xxxxxxxxxxxxx...



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.