[KLUG Members] book suggestions for openldap

[Adam Tauno Williams]

> > If you try to go into LDAP via a "cookbook" your steaming down a blind
> > alley, IMHO.  It is really best if you take some time to understand
> > the directory oriented approach.  Obviously this is true of anything,
> > but LDAP especially, and more so.
> Excuse me for not having groveled long enough before the sacred (and
> mostly hidden) texts of OpenLDAP, but why does slapcat(8C) print this:
> userPassword:: e2NyeXB0fKjHkjhKhKhKhkHkHkHKHkHkhmLKITYesXVNdrKUTdfjNNM=
> Why two colons? 

Two coloons indicate that the value is base64 encoded.

Try -

perl -MMIME::Base64 -wle 'print decode_base64(pop)' {value}

> Why no {crypt} or {md5} tag? This is the same using
> slapcat or ldapsearch(1), and I note that your presentation also has
> this format? Is it because I have only one password at the moment, and
> the e2NyeXB0f is code for md5?

It is just base64 encoded text, since it is possible for this string to contain
non-printable (or quasi-non-printabl) characters this is done to avoid
performing an assault on the sanity of your terminal.