At Tue, 14 Jan 2014 01:12:55 GMT, ylau@huawei.com wrote:

When nss_ldap uses LDAP authentication with binding method, the bindpw stored in ldap.conf is clear text. However on Solaris NS_LDAP_BINDPASSWD could be stored in encrypted string. There is no password obfuscation with nss_ldap. So we considered it is a security issue and will affect the result of security audit.

{NS1} format is not safe. You can decrypt it without any other secret.

http://stuff.iain.cx/2008/05/03/ns103eb2365be169abbe3a45088a10a/