Re: ppolicy by group

andylockran wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Guys,

Sorry to be a pain, but is there just this one #default ppolicy - and exceptions need to be made on an individual basis?

There's one configurable default:

database bdb suffix dc=example,dc=com overlay ppolicy ppolicy_default cn=Standard,ou=Policies,dc=example,dc=com"

man slapo-ppolicy:

"Every account that should be subject to password policy control should have a pwdPolicySubentry attribute containing the DN of a valid pwdPolicy entry, or they can simply use the configured default. In this way different users may be managed according to different policies."