[Fedora-directory-users] encryption userPassword

[Nalin Dahyabhai]

On Wed, Mar 26, 2008 at 12:48:58PM +0100, Luigi Santangelo wrote:
> With FDS, I created the user red (password red) and this is the code 
> LDIF that I exported from FDS:
[snip]
> userPassword: {MD5}valkOsZgFyKijyOHFCdNpA==
[snip]
> But if I create, with the MD5sum utility, the MD5(red), I got 
> 1098e2cb1442f45f8ca2e74e1cd24bd0
> Why? It isn't the same algoritme? In the FDS I must have the same 
> value of MD5sum utility. How can I do?

Nothing's wrong.  The text "valkOsZgFyKijyOHFCdNpA==" is a
base64-encoded version of these bytes [1]:
  bd a9 64 3a c6 60 17 22 a2 8f 23 87 14 27 4d a4

You seem to have given the md5sum utility the text "red\n", which gives
me 1098e2cb1442f45f8ca2e74e1cd24bd0.  The md5sum of the text "red" is
actually bda9643ac6601722a28f238714274da4, which is what the directory
server stored.

Just a guess, but if you're using echo and piping the text through
"md5sum" on the command line to do the calculation, be sure you run echo
with the "-n" flag so that it doesn't append a newline to the output.
Then the results will match.

HTH,

Nalin

[1] "echo valkOsZgFyKijyOHFCdNpA== | openssl base64 -d | od -t x1"