Andris.Eiduks@tietoenator.com wrote:
Then do You recommend use only clearteaxt password from *client* side ?
Yes. Specifically, the client should always use the PasswordModify extended operation, it should not use LDAPModify on the userPassword attribute. (For one thing, there are no guarantees that a particular server even uses the userPassword attribute for anything.)