From 0f940b5c3ef0303324f930e0d27b4a60df4aceca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ond=C5=99ej=20Kuzn=C3=ADk?= <ondra@mistotebe.net>
Date: Thu, 12 Jan 2023 12:28:22 +0000
Subject: [PATCH] ITS#10436 Check we understand the requested password hash
 early

---
 servers/slapd/slappasswd.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/servers/slapd/slappasswd.c b/servers/slapd/slappasswd.c
index 09892e3f0b..d664d347b6 100644
--- a/servers/slapd/slappasswd.c
+++ b/servers/slapd/slappasswd.c
@@ -241,6 +241,12 @@ slappasswd( int argc, char *argv[] )
 	}
 #endif
 
+	if ( !lutil_passwd_scheme( scheme ) ) {
+		fprintf( stderr, "Password scheme not recognised\n" );
+		rc = EXIT_FAILURE;
+		goto destroy;
+	}
+
 	if( pwfile != NULL ) {
 		if( lutil_get_filed_password( pwfile, &passwd )) {
 			rc = EXIT_FAILURE;