From d63ebabc8521bf1b7c3f393e4deb2210d9a153f7 Mon Sep 17 00:00:00 2001 From: Brendan Golden Date: Wed, 24 May 2023 15:31:58 +0100 Subject: [PATCH] ldap: able to deal with up to ssha512 passwords --- applications/ldap.nix | 7 ++++++- secrets/ldap/self_service.age | Bin 1754 -> 1882 bytes 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/applications/ldap.nix b/applications/ldap.nix index 175fefa..53fc63e 100644 --- a/applications/ldap.nix +++ b/applications/ldap.nix @@ -136,9 +136,14 @@ Gonna use a priper nixos module for this "cn=modules".attrs = { objectClass = [ "olcModuleList" ]; cn = "modules"; - olcModuleLoad = ["dynlist" "memberof"]; + olcModuleLoad = ["dynlist" "memberof" "pw-sha2"]; }; + "olcDatabase={-1}frontend".attrs = { + objectClass = [ "olcDatabaseConfig" "olcFrontendConfig" ]; + + olcPasswordHash = "{SSHA512}"; + }; "olcDatabase={1}mdb" = { attrs = { diff --git a/secrets/ldap/self_service.age b/secrets/ldap/self_service.age index 73fddef17d608595097a1e0a013badd708983615..4589a017f62e33c50114a6a004dbf87936af104d 100644 GIT binary patch delta 1801 zcmV+k2ln{d4cZQnEPq%vQ%y~IL`zUsNNIF=MMy$PdSo|jK}t}%WGhi*Gzu*~ zAaiqQEoEdfH8n9gAaY4}Y<71bPC{x*M>tSrbaXB0VZdPY(H$i7wM0ieGZf0tCF>Y!vZCPwib97}yL@`%kI50~uH!)F@UjY|ZaWF+h zQh0MlFi1#obZ}^SFnLNgc33fMWpYGwW=TpmcT8eedO2}&YG*hKV{c}HZMpaWmS7BvjQ*~x%Ph?grd2vKdQdN`80T_Q;NMmqsZZv2{W@cqbM>lFz zOk+W8VnkFjR%L8VYFKo7d39BALR5E5Gh+&Kcv)CPb8=8=ZBQ~zOHWWtFKsnYW=~c` zP&QdtFhg!HdUjSCTll-AY)T0 zMrH~}LTP_`OlC5AWMXe}Mn_6wR7W#fRzp)|XJL3ZWG`B0GEHw~NOMI(S}S#FLrZ2t zXH7?Nbaq2`H%&!0aC&%03Qta9I8sAIM|E>HGH6y}MmS1wGe|^lc3N|2Re4!3d16|4 zRA)JFY-(^~cywe@QdUwcaadw9SuksCND3`2Eg*k)PjXOYD|SO+c}`JGVoO9)az{gO zY;QI;F)%bTa6(K>M^#yNXHIraV^Iq638hONwh}8yy#zwH){5Ir9}a+ccx#7g05U?Tcp)p@`_WPhG+hhDvfqmpWLBtHaO)@QWQ0+DzOjJ(u__D? zFvVWjPI&PxvWTKSMQBB3@$1?dwC*6cb9sNZ=~|%c7w_*RwqGXCI`BiAkYv|R<@a@DzdEKHiwtkROzx z$Q+jjwX~iz`PCyOMey*ebxVN`?TA0Cv>SB`65Pddj`D(o!Q`sRg`>Bxk41k}EB+=v zT_>HSI@%1)=b$#E8{5Tr~HN$Br&J$qx+Y4cBF*;bXS`{OY5OENz7{BB(v=4evUzfRIwl#S?vV z+cZO`rf@ONa{da-SN7Ftdx4#U9*isfB`q%Y z8)l5U_DfHe2cFJo6w-gLGw`At$RY5K!>W7q)e@+0B$63Q2WXVpL6UI81UvM^{NyYA|tiL2+a;cSAOMN-=j;HBNYDS4nhX zW^r0;k?|K-L}ge?Z)j&{bT>zAX;FGqMNCLFH)3yPVtO=8T6Z!^cUVY4S4MU?K{Htj zdRaD7a7Qm#L}o8xdN^x#dU7;&HfnZcT48#6F;H(WRe5M=YgkTHWq;?P)SsJY)Z9`glL^KL5J|IIXcsh42XL4m>b7cy5VsueyFM3O4W>R!aHF|Ax zT4!}gRcC)@LvUkRc|&V>PIGZsIA(59Y*aBzc34DqXF*CiYFaWec~NXja%?YU3Rp&M zQFUTVPHav_I8Ie%Qcr9*Nmoa7Ghm zB;z47eCHwY9DBBsl*(+{BM%MHRn8b@c-8YNH_l0jsK#CSTDLr@!xxb}5JG)%m7}E! z%Mh)M%zy)WtARc% z(CddEj)2$GBbT7SP}z?V8z!WMKve@$d3Jvi;+P&0V|WpT67;KbKeXk>t}KvEzmAd$ zT3MO$D&p;$#Wrgah=xXHhoYtxWS(mH-bL2YVKp)AC(%0G%NG{cqbiB(T!KCE|Ex&_ z8Y++G!x}Fw0*uRlZIVq+_-Ttp9>NU6Tbj4h&FfuZboS;^HK2vUB_C9sl<+_^fysZp zVw?0b=6KVScOl)A@An3?fktbF8Y##-zOtWuUvwKm8vSXYyD{192HODpz`t>Vi`FBS z&oIYYWOleP{2+kwe4&@p$yMG0+n{GpimLBiE6 zEca~ro}Rje6g^bc1 z=BePw5$=5cVi99QMI0~NFcib#aI}tr*&3RFIjfay%+!T5HNLmIM#QJ-tOul?bbBp7 zSe=!hj|c&zF2aZ!14>rk5_- RgOQYYxzFRt6-`IN{4&&{+qeJ#