I don't have FDS yet but speaking from my Sun LDAP experience there are four methods to store the userPassword: plain, crypt, SHA and SSHA It is set in the global password policy, but you may create more policies with other settings and apply them individual to users. So I guess you have to change the global policy and everybody has to set their password again. Frerk Meyer EDEKA Aktiengesellschaft GB Datenverarbeitung Frerk Meyer CC Web Technologien New-York-Ring 6 22297 Hamburg Tel: 040/6377 - 3272 Fax: 040/6377 - 41268 mailto:frerk.meyer@edeka.de