https://bugs.openldap.org/show_bug.cgi?id=9575
--- Comment #4 from Howard Chu hyc@openldap.org --- (In reply to Quanah Gibson-Mount from comment #3)
(In reply to Michael Ströder from comment #2)
On 6/7/21 10:39 PM, openldap-its@openldap.org wrote:
ITS#5082 RE23 compatibility, allow olcPasswordHash in global entry
is why this is there.
So it's time to drop it, isn't it?
No. If you actually read the full code associated with the commit, slapd is supposed to correctly handle the value existing in the global location. Clearly there's a bug there that needs to be fixed, but the 2.3 compatibility should remain. We still have people show up with 2.0 systems...
No bug. cn=config is read before cn=module,cn=config so you obviously can't refer to a hash mechanism in cn=config that's dynamically loaded.
This ticket is invalid.