attribute value length limit

[Alan DeKok]

Fco. Javier Melero wrote:
> Well, surely I'm missing something, but that's the way I've found to
> store clear text passwords in LDAP keeping some peace of mind. What
> could be the alternative?

  Storing them as clear-text.

  Encrypting them adds *zero* benefit, because application that needs
the passwords has to be given the decryption key.  Since the decryption
key is scattered all over the place in your network, it's not adding
much security.

  To put it another way, almost no one does what you're doing.

  Alan DeKok.