https://bugs.openldap.org/show_bug.cgi?id=9254
--- Comment #5 from Ryan Tandy ryan@openldap.org --- If you actually are running 2.4.42, the slapd hang may be bug 7537, fixed in 2.4.43. Not sure about slapcat, that may be a separate bug, but please test a current release anyway.
Where did you get the number 315360000 from? As far as I know, OpenLDAP would accept any value that fits into a signed int.
The schema doesn't mention any min or max value for pwdMaxAge, so I think you can put any integer there. However, at runtime, if it (or any other parameter) can't be parsed as a signed int value, I think the whole policy is ignored (IIRC).
(side note: is signed int really correct for all of these? shouldn't a lot of them be unsigned...?)