This overlay is experimental, as the draft is incomplete yet.

   1. Did you RTFM slapo-ppolicy?
   2. Did you check openldap version is higher than 2.3?
   3. check ppolicy overlay successfully loaded and being used (can be found
      by checking if operational attribute like pwdFailureTime was maintained;
   4. pwdAttribute setting: value should be "userPassword";
   5. pwdCheckQuality: for testing better make value 2 (server always 
      check password syntax);
   6. pwdMinLength: e.g. value is 6, server do not accept password
      short than 6 character;
   7. ppolicy_default: check this by checking if changes to pwdMaxFailure on
      default entry have effect;
   8. check the entry being operated doesn't have pwdPolicySubentry, 
      so default should be applied;
   9. make sure slapd server was restarted after all above check (e.g. because
      of change to slapd.conf)
  10. make sure you are not bound as rootdn in testing;
  11. make sure you are using ldappasswd(1) rather than ldapmodify(1);