The ensures that clear-text passwords contained in LDIF entries are properly encoded before they are stored in the appropriate directory server backend. ds-cfg-password-policy-import-plugin ds-cfg-plugin org.opends.server.plugins.PasswordPolicyImportPlugin ldifimport false Specifies the names of the password storage schemes to be used for encoding passwords contained in attributes with the user password syntax for entries that do not include the ds-pwp-password-policy-dn attribute specifying which password policy is to be used to govern them. If the default password policy uses the attribute with the user password syntax, then the server uses the default password storage schemes for that password policy. Otherwise, it encodes user password values using the "SSHA" scheme. The referenced password storage schemes must be enabled when the is enabled. ds-cfg-default-user-password-storage-scheme Specifies the names of password storage schemes that to be used for encoding passwords contained in attributes with the auth password syntax for entries that do not include the ds-pwp-password-policy-dn attribute specifying which password policy should be used to govern them. If the default password policy uses an attribute with the auth password syntax, then the server uses the default password storage schemes for that password policy. Otherwise, it encodes auth password values using the "SHA1" scheme. The referenced password storage schemes must be enabled when the Password Policy Import plug-in is enabled. ds-cfg-default-auth-password-storage-scheme