slappasswd -h {CRYPT} not working

Question

Hi ,

When I try to encrypt the password by using the following command on my linux machine:

slappasswd -h {CRYPT}

I am prompted for a new password:

Re-enter the new password :

After typing this I encounter the following error:

Password generation failed for scheme {CRYPT}: scheme not recognized.

Why am I getting this error? I am using the OpenLDAP.

Answer 1

this might be caused by your shell (tcsh?) treating the {} characters special. does

slappasswd -h '{CRYPT}'

work?

also, your openldap must be built with crypt support ($LDAP_SRC/configure --enable-crypt):

ldd /usr/sbin/slappasswd | grep libcrypt

(adapt the path to slappasswd as necessary) should output something.