Re: ppolicy configuration

[Igor Shmukler <igor.shmukler@gmail.com>]

Hi again Michael and everyone,

I have ppolicy.schema is /etc/ldap/schema/ppolicy.schema - hopefully
the correct location.
I enabled/loaded ppolicy.la by running the below:
dn: cn=module{0},cn=config
changetype: modify
add: olcModuleLoad
olcModuleLoad: ppolicy.la

The dynamically linked shared object seems to be loading correctly.

I see that my config database has schema records as below:
dn: cn={0}core,cn=schema,cn=config
dn: cn={1}cosine,cn=schema,cn=config
dn: cn={2}nis,cn=schema,cn=config
dn: cn={3}inetorgperson,cn=schema,cn=config

Do not see one for ppolicy nor have I already found a way to load
ppolicy.schema. I could probably convert the ppolicy.schema file,
using the schema2ldif script; then load the resulting ldif using
ldapi. Is that how ppolicy.schema is typically "entered" into an
OpenLDAP server?

Thank you,

Igor Shmukler


On Mon, Mar 9, 2015 at 1:39 PM, Igor Shmukler <igor.shmukler@gmail.com> wrote:
> Hello Michael,
>
> I did not, explicitly. At least, not since I last rebuilt my server. I
> will look into this.
>
> Thank you,
>
> Igor Shmukler
>
> On Mon, Mar 9, 2015 at 1:34 PM, Michael Ströder <michael@stroeder.com> wrote:
>> Igor Shmukler wrote:
>>> adding new entry "olcOverlay=ppolicy,olcDatabase={2}hdb,cn=config"
>>> ldap_add: Other (e.g., implementation specific) error (80)
>>> additional info: User Schema load failed for attribute "pwdAttribute".
>>> Error code 17: attribute type undefined
>>
>> Did you load the ppolicy schema before?
>>
>> Ciao, Michael.
>>