ldap: able to deal with up to ssha512 passwords

2023-05-24 15:31:58 +01:00 · 2023-05-24 15:31:58 +01:00 · d63ebabc85
commit d63ebabc85
parent d056929a18
2 changed files with 6 additions and 1 deletions
--- a/applications/ldap.nix
+++ b/applications/ldap.nix
@ -136,9 +136,14 @@ Gonna use a priper nixos module for this
          "cn=modules".attrs = {
            objectClass = [ "olcModuleList" ];
            cn =  "modules";
-            olcModuleLoad = ["dynlist" "memberof"];
+            olcModuleLoad = ["dynlist" "memberof" "pw-sha2"];
          };

+          "olcDatabase={-1}frontend".attrs = {
+            objectClass = [ "olcDatabaseConfig" "olcFrontendConfig" ];
+
+            olcPasswordHash = "{SSHA512}";
+          };

          "olcDatabase={1}mdb" = {
            attrs = {
--- a/secrets/ldap/self_service.age
+++ b/secrets/ldap/self_service.age