Hi Geoff, > On 06. May, 2020, at 10:33, Geoff Winkless <pgsqladmin@xxxxxxxx> wrote: > > Is there an objection to openldap? It's lightweight (so could > reasonably be run on the same hardware without significant impact), > BSD-ish and mature, and (with the password policy overlay) should > provide exactly the functionality the OP requested. > > Geoff we use openldap in our company and it works as desired. Cheers, Paul