Three attributes: https://stwalkerster.net/oid/?prefix=cn=passwordResetQuestions,cn=attribute,cn=ldap,cn=stwalkerster.co.uk,cn=enterprise,cn=private,cn=internet,cn=dod,cn=org,cn=iso, https://stwalkerster.net/oid/?prefix=cn=passwordResetHash,cn=attribute,cn=ldap,cn=stwalkerster.co.uk,cn=enterprise,cn=private,cn=internet,cn=dod,cn=org,cn=iso, https://stwalkerster.net/oid/?prefix=cn=passwordResetHashTimestamp,cn=attribute,cn=ldap,cn=stwalkerster.co.uk,cn=enterprise,cn=private,cn=internet,cn=dod,cn=org,cn=iso, ... and one objectclass: https://stwalkerster.net/oid/?prefix=cn=passwordReset,cn=objectclass,cn=ldap,cn=stwalkerster.co.uk,cn=enterprise,cn=private,cn=internet,cn=dod,cn=org,cn=iso, From those links copy the olcattributetypes and olcobjectclasses attributes into: cn=stwalkerster,cn=schema,cn=config ... when using the OLC config for OpenLDAP