We can check that an incoming modification will not leave an entry with more than one userPassword value. We already have a partial check for this now. But what can we do for an entry that already had multiple values, e.g., created before the overlay was in use? Simply refuse to Bind?
-- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/
