Re: (ITS#5207) Password checking: external program

[hyc@symas.com]

hadmut@danisch.de wrote:
> But this opens other questions:

> Does slapd support multiple password entries?

Of course. The schema definition for userPassword says that it is a 
multivalued attribute. (Note: "values" not "entries". Seems you need to do 
some more reading on LDAP basics.)

> What does slap (and slappasswd) do if there are multiple entries for
> userPassword? Does slapd check them all until one of them matches?

slappasswd doesn't know anything about that. slapd checks until it finds a match.

-- 
   -- Howard Chu
   Chief Architect, Symas Corp.  http://www.symas.com
   Director, Highland Sun        http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP     http://www.openldap.org/project/