https://bugzilla.redhat.com/show_bug.cgi?id=653007 https://bugzilla.redhat.com/attachment.cgi?id=472145&action=diff https://bugzilla.redhat.com/attachment.cgi?id=472145&action=edit Discussed with Nathan and removed the "passwordStorageScheme" check. My previous proposals added "{CLEAR}" only when the global passwordStorageScheme was "clear" and passwords were not hashed. This did not cover some cases such as the global passwordStorageScheme was not clear and a fine grained password policy was. This revised patch checks every userPassword value regardless of the password scheme and put "{CLEAR}" if the value is not hashed. -- 389-devel mailing list 389-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-devel
