I wrote the overlay, it can be found at: http://www.paolomeschi.com/openldap/pwcompare.c With this overlay a user can compare a cleartext value to an hashed userPassword value but also can compare the hashed value to the userPassword. (So he could check also if "{crypt}qWe2pXud183" is the stored password)