Re: libnss-pam-ldapd: retrieve password information from an LDAP user?

[Arthur de Jong <arthur [at] arthurdejong.org>]

Hi Andrea,

On Mon, 2021-03-29 at 10:32 +0200, Andrea Sighinolfi wrote:
> I would like to know if it is possible to read the password from an
> LDAP user through the glibc function like getpwnam / getspnam. They
> work for normal local users, but they seems to not work for remote
> LDAP users.

I assume you mean the password hash as it is stored in the userPassword
attribute in LDAP. By default nslcd only returns "*" as password hash 
as a security measure (safe default) but you can enable returning the
actual hash with the following in nslcd.conf:

  map passwd userPassword userPassword


For more details see
https://arthurdejong.org/nss-pam-ldapd/nslcd.conf.5#map

Hope this helps,

-- 
-- arthur - arthur@arthurdejong.org - https://arthurdejong.org/ --