This allows to add passwords to LDAP entries which do not support passwords by other object classes. E.g. passwords can be added to organizational roles.

The simple security object module can be added to the following account types: users, groups, group of names and hosts

Attention: simple security objects require a password to be set. If you choose LDAP_EXOP as password hash then no new LDAP entries can be created. The reason is that EXOP requires to set the password on an already existing account (but simpleSecurityObject requires to set it in first place). So no password is set at the initial account creation which will then fail.

Configuration:

Add the Simple Security Object module to your account type.

Next configure the password hash type to use (module settings tab).

Now you can add a password to your entries by adding the extension to an entry.