Yeah. I ended up looking at the man page and kind of got the point. It would be great if there was a way to apply a pwdPolicySubentry to a subtree and have all newly created accounts inherit the policy. I am transitioning from RHDS which has that functionality.
Thanks, Court
-----Original Message----- From: openldap-technical [mailto:openldap-technical-bounces@openldap.org] On Behalf Of Marc Patermann Sent: Thursday, October 15, 2015 4:01 AM To: openldap-technical@openldap.org Subject: Re: Can a ppolicy be applied to a subtree?
Hi,
Am 14.10.2015 um 16:06 Uhr schrieb Campbell, Courtney:
I am curious if a ppolicy can be applied to a subtree so that it is added to a user account when newly created?
Unfortunately not. I would like to have that too. As far as I know ppolicy overlay is a database setting. See man slapo-ppolicy. You can split your DIT to multiple database apply ppolicy to the database with your user account subtree and glue the databases together to behave like a single DIT again.
Marc
________________________________
This message (including any attachments) is confidential and intended for a specific individual and purpose. If you are not the intended recipient, please notify the sender immediately and delete this message.