This adds a new parameter to both the ldap configuration and the static role that will skip the initial password rotation on import. While this means vault won't know the password for the static user (/ldap/static-cred/role-name won't return a password), it does mean that an admin can pre-load users into ldap (say, during an AD->LDAP migration), without immediately changing the passwords.
This setting is off by default to retain backwards compatibility.
This adds a new parameter to both the ldap configuration and the static role that will skip the initial password rotation on import. While this means vault won't know the password for the static user (/ldap/static-cred/role-name won't return a password), it does mean that an admin can pre-load users into ldap (say, during an AD->LDAP migration), without immediately changing the passwords.
This setting is off by default to retain backwards compatibility.