You neglected to say which password encryption scheme you were using but if I was going to guess, based on your question, you are using crypt. Suggest you use SSHA

Craig White

System Administrator

O 623-201-8179   M 602-377-9752

SkyTouch Technology     4225 E. Windrose Dr.     Phoenix, AZ 85032

From: openldap-technical [mailto:openldap-technical-bounces@openldap.org] On Behalf Of jeevan kc
Sent: Thursday, May 14, 2015 2:03 PM
To: openldap-technical@openldap.org
Subject: Openldap password problems

Hello all,

We've just noticed that when a user authenticates via LDAP, it  ignores characters after the right password. 

For example a user jkc900 has Password Welcome1 

But the user can type in Welcome1111  or Welcome12 etc and still can get into the application. Its just checking the first Welcome1 and they can type anything after that and still can log in.  We've tested at least 50 users and they all have the same issues. Any clues/ solution for this?

Your inputs are highly appreciated.
Jeevan