[Schema] describes userPassword: The userPassword attribute type contains character strings that are known only to the user and the system to which the user has access. Each string is one value of this multi-valued attribute. As previously discussed, userPassword is not necessarily character data, s/character/octet/ to fix. I also note that "attribute type" should be replaced with "attribute" as your describing attribute values.