Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (nike.apache.org: domain of pajbam@gmail.com designates
 74.125.82.44 as permitted sender)
Sender: Pierre-Arnaud Marcelot <pajbam@gmail.com>
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1278)
Subject: Re: ApacheDS - DIGEST-MD5 - INVALID_CREDENTIALS: DIGEST-MD5: cannot
 acquire password
From: Pierre-Arnaud Marcelot <pa@marcelot.net>
In-Reply-To: <34139016.post@talk.nabble.com>
Date: Tue, 10 Jul 2012 14:16:45 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <C12791D2-DCAA-4AA2-AAF3-1B879357FC3A@marcelot.net>
References: <34132601.post@talk.nabble.com>
 <CABzFU-d-=+EFSB9z+EhHWGmUu6GtMZTKnnxUF-N9=5rLy1pOqg@mail.gmail.com>
 <34132739.post@talk.nabble.com> <34138828.post@talk.nabble.com>
 <9A66C8A2-5BE1-4405-B2C2-F7FBA6240B97@marcelot.net>
 <34138947.post@talk.nabble.com> <34139016.post@talk.nabble.com>
To: "Apache Directory Developers List" <dev@directory.apache.org>

Cool.

Let us know if you have any other issue.

Regards,
Pierre-Arnaud

On 10 juil. 2012, at 12:50, rJassal wrote:

>=20
> Its working.
> I have to update the value for ads-searchBaseDN
>=20
>=20
> rJassal wrote:
>>=20
>> Hi Pierre-Arnaud ,
>>=20
>> Thanks for the reply.
>> Now ApacheDS is accepting the plain text password.
>>=20
>> But still I am getting the error using the code I posted above. If
>> possible can you please let me know what is wrong with that code.
>> Thanks in advance.
>>=20
>>=20
>>=20
>> Pierre-Arnaud Marcelot-2 wrote:
>>>=20
>>> Here's the procedure for ApacheDS 2.0.0-M7.
>>>=20
>>> You should deactivate the Password Hashing interceptor and the =
Password
>>> Policy.
>>>=20
>>> To do so, you need to switch the 'enabled' attribute to 'false' on =
both
>>> entries:
>>> -
>>> =
ads-interceptorId=3DpasswordHashingInterceptor,ou=3Dinterceptors,ads-direc=
toryServiceId=3Ddefault,ou=3Dconfig
>>> -
>>> =
ads-pwdId=3Ddefault,ou=3DpasswordPolicies,ads-interceptorId=3Dauthenticati=
onInterceptor,ou=3Dinterceptors,ads-directoryServiceId=3Ddefault,ou=3Dconf=
ig
>>>=20
>>> Then, you need to restart the server.
>>>=20
>>> ApacheDS should accept plain text password from now on.
>>>=20
>>> Regards,
>>> Pierre-Arnaud
>>>=20
>>> On 10 juil. 2012, at 12:08, rJassal wrote:
>>>=20
>>>>=20
>>>> Any pointer for this.
>>>> I tried with Apaches 1.5.7 and getting same error.
>>>>=20
>>>>=20
>>>>=20
>>>> rJassal wrote:
>>>>>=20
>>>>> Yes, password is stored in salted-SHA hashes.(I can see this once
>>>>> connected using Apache Studio).
>>>>> But in my ldif file I provided the password as plain text.
>>>>> userpassword:: secret
>>>>>=20
>>>>> Where can I configure ApachesDS not to store my password in SHA =
hashes?
>>>>>=20
>>>>>=20
>>>>> Kiran Ayyagari-2 wrote:
>>>>>>=20
>>>>>> DIGEST-MD5 requires the password to be stored in plain text in =
the
>>>>>> server.
>>>>>> check if your password is stored in plain text or not, by default
>>>>>> ApacheDS stores the
>>>>>> passwords in salted-SHA hashes
>>>>>>=20
>>>>>> On Mon, Jul 9, 2012 at 12:36 PM, rJassal
>>>>>> <jassal.ravinderjit@gmail.com>
>>>>>> wrote:
>>>>>>>=20
>>>>>>> Hi,
>>>>>>>=20
>>>>>>> I am working with ApacheDS 2.0.0-M7 release and trying to =
connect
>>>>>>> using
>>>>>>> DIGEST-MD5 mechanism using the below code.
>>>>>>>=20
>>>>>>>=20
>>>>>>>       Hashtable env =3D new Hashtable();
>>>>>>>=20
>>>>>>>       env.put(Context.INITIAL_CONTEXT_FACTORY,
>>>>>>> "com.sun.jndi.ldap.LdapCtxFactory");
>>>>>>>       env.put(Context.PROVIDER_URL,
>>>>>>> "ldap://ldap.example.com:10389");
>>>>>>>=20
>>>>>>>       env.put(Context.SECURITY_PRINCIPAL, "mborn");
>>>>>>>       env.put(Context.SECURITY_CREDENTIALS, "secret");
>>>>>>>       env.put(Context.SECURITY_AUTHENTICATION, "DIGEST-MD5");
>>>>>>>       env.put( "java.naming.security.sasl.realm", "example.com" =
);
>>>>>>>=20
>>>>>>>       InitialDirContext ctx =3D new InitialDirContext(env);
>>>>>>>=20
>>>>>>> But I am getting this error 'INVALID_CREDENTIALS: DIGEST-MD5: =
cannot
>>>>>>> acquire
>>>>>>> password'.
>>>>>>>=20
>>>>>>> Can anyone please help me in this?
>>>>>>> Am I doing something wrong in the code or do I need to make some
>>>>>>> configuration changes in ApacheDS?
>>>>>>> --
>>>>>>> View this message in context:
>>>>>>> =
http://old.nabble.com/ApacheDS---DIGEST-MD5---INVALID_CREDENTIALS%3A-DIGES=
T-MD5%3A-cannot-acquire-password-tp34132601p34132601.html
>>>>>>> Sent from the Apache Directory Project mailing list archive at
>>>>>>> Nabble.com.
>>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>>> --=20
>>>>>> Kiran Ayyagari
>>>>>>=20
>>>>>>=20
>>>>>=20
>>>>>=20
>>>>=20
>>>> --=20
>>>> View this message in context:
>>>> =
http://old.nabble.com/ApacheDS---DIGEST-MD5---INVALID_CREDENTIALS%3A-DIGES=
T-MD5%3A-cannot-acquire-password-tp34132601p34138828.html
>>>> Sent from the Apache Directory Project mailing list archive at
>>>> Nabble.com.
>>>>=20
>>>=20
>>>=20
>>>=20
>>=20
>>=20
>=20
> --=20
> View this message in context: =
http://old.nabble.com/ApacheDS---DIGEST-MD5---INVALID_CREDENTIALS%3A-DIGES=
T-MD5%3A-cannot-acquire-password-tp34132601p34139016.html
> Sent from the Apache Directory Project mailing list archive at =
Nabble.com.
>=20