[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#7004) ppolicy pwdCheckQuality constraint prevents from changing userPassword, even if pwdPolicySubentry is removed in the same modify operation

Full_Name: Clément OUDOT
Version: 2.4.26
OS: GNU/Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (

I have a piece of code that does this singel modify operation on OpenLDAP:
* remove pwdPolicySubentry value
* replace userPassword value

My password policy has pwdCheckQuality set to 2 (strict checking). My new
userPassword value is {SASL}bob@example.com. But the modify operation failed

conn=1058 op=100 RESULT tag=103 err=19 text=Password fails quality checking

I was thinking than removing the pwdPolicySubentry was sufficient to disable all
ppolicy constraint on the userPassword replacement in the same modify operation.
Am I wrong or do I face a ppolicy overlay bug?