multiple password policies?

["R.B." <allegatis@gmail.com>]

Hi;

After reading some ppolicy HOWTOs, I've seen the following line in the
slapd.conf file to assign a default password policy to users.

slapd.conf file contains:
`ppolicy_default "cn=default,ou=policies,dc=example,dc=com"`

So I imagine this is used as the default policy for all users since
it's defined globally.

If I have several OUs that define users, groups, etc… how would I
implement a password policy per user/group?

For my setup, I would conceivably have:
cn=swa-ppolicy,ou=ppolicies,dc=example,dc=com
and
cn=pse-ppolicy,ou=ppolicies,dc=example,dc=com

...and so on as I need policies in my directory.

How can I apply these per group or user? Would I add a field to my
posix[User|Group] schema?

Thanks!

Rafael