[Issue 9575] Object class olcGlobal should not allow olcPasswordHash

https://bugs.openldap.org/show_bug.cgi?id=9575

--- Comment #3 from Quanah Gibson-Mount quanah@openldap.org --- (In reply to Michael Ströder from comment #2)

On 6/7/21 10:39 PM, openldap-its@openldap.org wrote:

...

ITS#5082 RE23 compatibility, allow olcPasswordHash in global entry

is why this is there.

So it's time to drop it, isn't it?

No. If you actually read the full code associated with the commit, slapd is supposed to correctly handle the value existing in the global location. Clearly there's a bug there that needs to be fixed, but the 2.3 compatibility should remain. We still have people show up with 2.0 systems...