Hello,

We are using openldap 2.3.37 , We have set up ppolicy with following attributes :

<ppolicy.lidf>

dn: cn=basicPwdPolicy,dc=avaya,dc=com
cn: basicPwdPolicy
objectClass: device
objectClass: pwdPolicy
objectClass: top
pwdAttribute: 2.5.4.35

pwdMaxAge: 86400
pwdAllowUserChange: TRUE
pwdMustChange: TRUE
</ppolicy.lidf>

We have added this policy in slapd.conf file as below :

overlay ppolicy
ppolicy_default "cn=basicPwdPolicy,dc=avaya,dc=com"

For users we are adding we are able to see password expiry, however ("pwdMustChange") user is not forced to change the password for first login.

We want to force user to change its password on the first login.

Any help in this context will be appreciated