[Date Prev][Date Next]
Re: (ITS#5648) ppolicy controls entries without objectclass pwdPolicy
> man slapo-ppolicy(5) says that the overlay depends on objectclass pwdPolicy and
> Every account that should be subject to password policy control should have
> But ppolicy is controlling every enty, even those without attribute pwdPolicy
> and attribute pwdPolicySubentry.
> I have created a test entry, which is not subject to password policy but got
> locked out after 3 binds with wrong password.
Do you have 'ppolicy_default' set in slapd.conf?
What happens if you remove that?