Actually, slapd has supported sasl_setpass for many years...

diff --git a/doc/guide/admin/security.sdf b/doc/guide/admin/security.sdf
index 19c93635535be73842c3d269abd63e5f69025e35..4b045f5f402ee7b3ec5e0af1d2c34b7375aaaf86 100644 (file)
--- a/doc/guide/admin/security.sdf
+++ b/doc/guide/admin/security.sdf
@@ -303,9 +303,6 @@ mechanism and are used to identify the account whose password is to be
 verified. This allows arbitrary mapping between entries in OpenLDAP
 and accounts known to the backend authentication service.
 
-Note: There is no support for changing passwords in the backend
-via {{slapd}}.
-
 It would be wise to use access control to prevent users from changing 
 their passwords through LDAP where they have pass-through authentication 
 enabled.