Title: #2935: Switch nsslapd-unhashed-pw-switch to nolog
389-ds will change the default value of nsslapd-unhashed-pw-switch from 'on' to
For new IPA instance this attribute is set to 'nolog'.
For upgraded IPA instance, it replaces 'off' with 'nolog'.
In case of winsync deployement:
For new IPA instance where the attribute have been set to 'nolog', it is changed
when a replication agreement is created toward AD.
For upgrade IPA instance, the attribute was already set to 'on'. Upgrade does not
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2935/head:pr2935
git checkout pr2935