Re: OL 2.3.7 and password policy

[Howard Chu <hyc@symas.com>]

Samuel Tran wrote:
> Hi All,
>
> I am testing OL 2.3.7 on a Debian Sarge box.
> I would like to implement the password policy overlay.
>
> When I try to create a dn that would hold the password policy:
>
> stran@educ236:~$ ldapmodify -vv -x -W -D
> "uid=stran,ou=people,dc=example,dc=com" -H ldap://localhost -f
> passwd_cn.ldif 
> ldap_initialize( ldap://localhost )
> Enter LDAP Password: 
> replace cn:
>         password
> replace objectClass:
>         organizationalRole
>         pwdPolicy
> replace pwdattribute:
>         userpassword
> modifying entry "cn=password,ou=Policies,dc=example,dc=com"
> modify complete
> ldap_modify: Invalid syntax (21)
>         additional info: pwdattribute: value #0 invalid per syntax
>
> I don't understand why I get that error message.
>
>   
It looks like slapd's objectIdentifierMatch rule doesn't understand descriptions (though it is supposed to). You'll have to use the numeric OID instead, until that is fixed.

 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 OpenLDAP Core Team            http://www.openldap.org/project/