Attribute ibm-slapdPwEncryption accepts only one of following values: none, aes128
aes192, aes256, crypt, sha, ssha, md5, sha224, sha256, sha384, sha512, ssha224,
ssha256, ssha384, ssha512, pbkdf2-sha1, pbkdf2-sha224, pbkdf2-sha256,
pbkdf2-sha384 or pbkdf2-sha512
If SHA-2 feature is not enabled then sha224, sha256, sha384, sha512, ssha224,
ssha256, ssha384, and ssha512 are not allowed.
User response
If SHA-2 must be enabled, set ibm-slapdUseNonFIPSCrypt to true
in cn=configuration entry. If not, choose another encryption method.