Aaron Mills skrifa?i: > However, whenever users authenticate via LDAP the server appears to check only the first 8 characters of their passwords. You're probably using the CRYPT password method. Other, newer and safer methods, such as SSHA, can store much longer passwords.