https://bugs.openldap.org/show_bug.cgi?id=9656
--- Comment #3 from ktmdms@gmail.com ktmdms@gmail.com --- two things. when using ppm.so in OpenLDAP 2.4 the ppm.so,while included in the schema, didn't need the fully qualified pathname (I assume that the path was handled via the modulepath statement in the slapd.conf) and I don't know that that particular change is documented anywhere particularly succinctly. 2nd, there is a statement in the ppm.md that states: "If for some reasons, any parameter is not found, it will be given its default value." which would seem to indicate that there are some defaults coded into slapd to handle those times when someone doesn't set parameters, thereby keeping slapd from crashing. Either 1). slapd shouldn't start if these parameters are requirements when using ppolicy or 2). slapd shouldn't crash and should give a warning that default values are being used and one should verify if those defaults are valid or simply warn that ppolicy won't be used as necessary settings have not been populated.