# this sets a password ldappw for the config database
# ldapsearch -H ldapi:// -LLL -D "cn=admin,cn=config" -W  -b "cn=config" "(olcRootDN=*)" dn olcRootDN olcRootPW olcSuffix
# should work without -Y EXTERNAL and as normal user now
dn: olcDatabase={0}config,cn=config
changetype: modify
replace: olcRootPW
olcRootPW: {SSHA}5VEuBX9dLCSCj+TIp7XBXQRb3F5M2aSN