https://bugs.openldap.org/show_bug.cgi?id=8837

--- Comment #2 from Ryan Tandy ryan@openldap.org --- (In reply to Quanah Gibson-Mount from comment #1)

Actually, since it is an overlay, the slapo prefix is correct (o=overlay) and the slapd prefix is incorrect (used for backends).

I don't think calling a password module an "overlay" is accurate.

I agree with Peter, it should be called slapd-pw-pbkdf2.5 (and slapo-totp.5 to slapd-pw-totp.5 while we're at it). Or introduce a new "slapp-" convention if it must be distinguished from backends, but that seems overkill...