Hi,

my config is:

include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/openldap.schema include /etc/ldap/schema/ppolicy.schema

pidfile /var/run/slapd.pid argsfile /var/run/slapd.args loglevel none

modulepath /root/openldap-2.4.34/libraries/libldap/ moduleload back_hdb moduleload ppolicy.la sizelimit 99999999

tool-threads 1 backend hdb database monitor

database hdb suffix "dc=example,dc=com"

overlay ppolicy ppolicy_default "cn=default,ou=policies,dc=example,dc=com"

rootdn "cn=Directory Manager,dc=example,dc=com" rootpw {SSHA}5jMwnEvS+5cgKVtQVieEYScUjEQvhSkQ directory "/usr/local/var/openldap-data"

dbconfig set_cachesize 0 209715200 0 dbconfig set_lk_max_objects 150000 dbconfig set_lk_max_locks 150000 dbconfig set_lk_max_lockers 150000

index objectClass eq index uid eq index businessUnit eq index cn eq index lead eq index ishidden eq

lastmod on checkpoint 512 30

access to attrs=userPassword,shadowLastChange,sambaLMPassword,sambaNTPassword by dn="cn=Directory Manager" write by dn="cn=admin-ro,dc=example,dc=com" read by anonymous auth by self write by * none

access to * by dn="cn=Directory Manager" write by * read