dieter@dkluenter.de wrote:

Full_Name: Version: 2.4.33 OS: openSuSE-12.3-x86_64 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (91.65.235.202)

the pwdAttribute type requires a syntax of 1.3.6.1.4.1.1466.115.121.1.38, according to man slapo-ppolicy and ppolicy.schema. when adding a policy, the value of pwdAttribute gets changend from OID 2.5.4.35 to userPassword.

You are mistaken. slapd never changes this attribute from what the user stored.

In a replicated system syncrepl complaints about syncrepl_message_to_entry: rid=001 mods check (pwdAttribute: value #0 invalid per syntax) do_syncrepl: rid=001 rc 21 retrying.

This error will go away if you configure the ppolicy overlay on the consumer. Closing this ITS.

-Dieter