OK, It took me a while to get there (had to figure out what our equivalent of 'cn=Directory Manager' was), but there are indeed two entries for userPassword after I change the password logged in as myself to the console. When I reset the password using PAM-enabled passwd there is only one. -chris Nathan Kinder wrote: > Chris Halstead wrote: >> userPassword has no value at all. > Are you searching as "cn=Directory Manager" when you check for > userPassword? >> >> -chris >> >> Richard Megginson wrote: >>> Do you have two values for the userPassword attribute in your entry? >>