OpenLDAP should always be able to deal with a "password given in clear text" if it is stored in the userPassword attribute. I'm not sure what you're asking for here, but that statement is true whether you mean "I want to store in clear text in the directory" (which seems like an awful idea, but who am I to judge) or "I want to transmit in clear text over the network" (which seems like an awful idea, but who am I to judge) or both (which seems like two awful ideas, but who am I to judge). Note that to store in cleartext, you should not specify any {SCHEME} prefix to the userPassword. Transmitting over the network in the clear should be simpler (a default OpenLDAP config will allow this). On Tue, 23 Oct 2007, Matthias Bourillon wrote: