On Thu, 10 Apr 2014 11:36:50 +0100 Philip Colmer <philip.colmer@linaro.org> wrote > Given that pwdHistory is read-only and therefore I cannot delete those > entries, does anyone have any suggestions on how I can persuade OpenLDAP to > forget those old passwords? You can remove this attribute by using the relax rules control and a bind-DN who has manage privileges on this attribute. Ciao, Michael.