// ---- lookup the principal entry's userPassword attribute
LdapName principalDn = new LdapName( principal );
PartitionNexus rootNexus = getAuthenticatorContext().getPartitionNexus();
Attributes userEntry = rootNexus.lookup( principalDn );
if ( userEntry == null )
{
throw new LdapNameNotFoundException();
}