How does this work in HEAD? Can I put a ppolicy in a branch, and have all users _below_ that using it (without setting a ppolicy in each user object)?

Also, what is the format of the pwdAttribute attribute? I can't seem to get it (slapd) to accept:

pwdAttribute: userPassword

I get something like 'invalid format' or something (don't have my LDIF at hand right now so I can tripple check, but...).