On Tuesday 04 December 2007 01:35:57 R.B. wrote:

Hi;

After reading some ppolicy HOWTOs, I've seen the following line in the slapd.conf file to assign a default password policy to users.

slapd.conf file contains: `ppolicy_default "cn=default,ou=policies,dc=example,dc=com"`

So I imagine this is used as the default policy for all users since it's defined globally.

If I have several OUs that define users, groups, etc… how would I implement a password policy per user/group?

For my setup, I would conceivably have: cn=swa-ppolicy,ou=ppolicies,dc=example,dc=com and cn=pse-ppolicy,ou=ppolicies,dc=example,dc=com

...and so on as I need policies in my directory.

How can I apply these per group or user? Would I add a field to my posix[User|Group] schema?

Per-user, by setting the pwdPolicySubentry attribute on the entry for the user, as documented in slapo-ppolicy(5).

Regards, Buchan