So I have the patch almost finished, there are just two more options which you
wrote should be documented, but I'm not sure about them.
ldap_user_shadow_flag
Doesn't seem to be used anywhere
ldap_pwd_attribute
If the attribute with this name is set,
"ldap" password expiration policy
takes place (not quite sure how to call it), but it seems to be the same as
ldap_pwd_policy=none. I found no other usage besides this one.
--
Jan