https://bugzilla.redhat.com/show_bug.cgi?id=653007
https://bugzilla.redhat.com/attachment.cgi?id=472145&action=diff
https://bugzilla.redhat.com/attachment.cgi?id=472145&action=edit
Discussed with Nathan and removed the "passwordStorageScheme" check. My
previous proposals added "{CLEAR}" only when the global passwordStorageScheme
was "clear" and passwords were not hashed. This did not cover some cases such
as the global passwordStorageScheme was not clear and a fine grained password
policy was.
This revised patch checks every userPassword value regardless of the password
scheme and put "{CLEAR}" if the value is not hashed.