Hello! LLDAP stores passwords as a zero-knowledge proof, so they're neither importable nor exportable

if i added an attribute using cli, would that attribute be editable from the web interface or only via DB?

The web interface is almost there for custom attributes

🙂 i know you're not going to do it for probably already talked about reasons but i think having an env option to expose encrypted password as an attribute... LLDAP is popular choice because all other LDAPS are so ardous to setup/debug/configure, it's killer and people want something intuitive simple/beautiful

It's both a security choice (don't want to expose the password for other services to leak), and a purely practical choice: we depend on a specific version of a specific implementation of the OPAQUE algorithm, that is simply not supported in other services

ahhh okay that makes sense

I'm glad you do!