Ask the Expert

New LDAP directory doesn't recognize passwords after move from another LDAP server

I need to export the usernames and passwords from Domino via LDAP to import into another LDAP server. This works, but the passwords from Domino are encrypted and the new LDAP directory does not recognize the passwords. Is there a way to decrypt the password during the export from the Domino directory?
I am not an LDAP guru, so I cannot give you a certain answer, but here is a guess:

You can't do it. If you could, everyone's password would be vulnerable to an LDAP attack. Also, passwords are never stored "in the clear"; they are always hashed or encrypted in some way, for obvious security reasons.

Do you have comments on this Ask the Expert Q&A? Let us know.

This was first published in April 2004

Back to top