On Tue, Jan 07, 2020 at 12:22:05 -0800, Quanah Gibson-Mount wrote:
After deploying the sha2 module, all users must change their password so the hash gets updated. There is no way to magically convert existing hashes from SSHA1 to another scheme.
A controversial solution, but slapd could re-hash the password after a succesful authentication.
Geert