Help: Query unmodified non SSHA userPasswords

["Ulrich Windl" <Ulrich.Windl@rz.uni-regensburg.de>]

Hi!

I'd like to query userPassword attributes that don't start with "{SSHA", but it seems substring match doesn't work there.
An addition I'd like to find those users that didn't change their password since the user was created, i.e. modifyTimestamp=createTimestamp, but I think that's not possible in a search filter as the right of '=' is interpreted literally, right?

Any ideas?

Regards,
Ulrich