>With this overlay a user can compare a cleartext value to an hashed >userPassword value but also can compare the hashed value to the >userPassword. (So he could check also if "{crypt}qWe2pXud183" is the >stored password) Might be nicer to handle the latter case using SLAP_CB_CONTINUE. -- Luke --