Salted Hash, finally
Finally, after suggesting it be done months ago, I was able to implement salted hash for the Internet password field in our directory.
Check this technote for details and other related technotes:
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21255244
This is configured in the Directory Profile (open the NAB, select Actions, Edit Directory Profile)
Set “Use More Secure Internet Passwords” to Yes
This will be affective from any Internet passwords that are saved in the directory from that point forward.
You should also select each person document in the NAB and select Actions\Upgrade to more secure Internet Password.
Don’t ask why it took so long to enable this.