Search code examples
google-apps

Google Apps Directory Sync refusing to use SHA and MD5 hashes?


So I have been trying to get Google Apps Directory Sync to work for a few days now and it seems the only way I can make Google sync is with SHA1, then reconfiguring my LDAP Server to run plaintext passwords and manually hashing and updating passwords with a {SHA1} marker instead of {SHA}.

To me it seems like an inability to keep to standards, from either OpenLDAP or Google, so my question is: Is this really just an inconsistency in hash standards, or is there actually a way to make this work and if there is a way to make this work, how do I do it?

I am at my wits end here, the Google software for this is really super terrible.


Solution

  • It seems the answer to this question is, it will work, but only if the hash scheme is upper-case, like so: {MD5] and {SHA}. So the solution is to either use an LDAP browser or built a custom password changing program.