anybody knows how to implement a second password in an LDAP, so it's policies are different from the userPassword attribute ? The idea is to use it as a non-login password (for instance to "sign" a transaction).
Can you provide more detail as to what you are trying to accomplish? – Jim BMay 1 '10 at 3:25
Jim, thanks for you reply. Besides the "traditional" password used for authenticating to the system, once inside, there are certain operations that require a second authentication mechanism - a password independent from the one used for authenticating. The thing is this password used for transactions may be subject to different policies (length, duration, etc). So it all boils down to know if there's a way to assign different password policies to two passwords for a given user. – xainMay 1 '10 at 15:03