Le 21/09/2012 16:28, Soporte Ti a écrit : Login where ? On a web application ? On a unix workstation ? On an imap mail server ? A password is just an attribute in an LDAP server, so any command able to modify LDAP content can be potentially used. ldappassword being the most obvious one here. If, as I'm supposing now, you're actually using an LDAP server to manage Posix user accounts, and you have this issue when logging on an unix host, your problem is merely a client-side issue, and not an LDAP issue. You'll have better answers on the mailing list related to your exact LDAP client (pam_ldap, sssd, nss_pam_ldapd). -- BOFH excuse #70: nesting roaches shorted out the ether cable