create ldap {SSHA} (salted sha1) password hashes

create-ldap-ssha.sh

#!/bin/bash

tmpdir=$(mktemp --tmpdir -d create-ldap-ssha-XXXXXXX)
trap 'rm -rf "${tmpdir}"' EXIT

openssl rand -out "${tmpdir}/salt" 8

echo -n "Enter password: "
read -rs password
echo

echo -n "Confirm password: "
read -rs password2
echo

if [ "${password}" != "${password2}" ]; then
    echo >&2 "Password mismatch"
    exit 1
fi

hash=`(printf '%s' "${password}"; cat "${tmpdir}/salt") | (openssl sha1 -binary; cat "${tmpdir}/salt") | base64`
printf '{SSHA}%s\n' "${hash}"