Re: ppolicy not respecting overrides

Michael Proto wrote:

I'm currently seeing an issue with slapo-ppolicy and individual account overrides not being respected. [..] What I've done in the interim is create a new ppolicy container with no expiration and assigned my system account's pwdPolicySubentry attribute to that:

# NoPasswordPolicy, Policies, domain dn: cn=NoPasswordPolicy,ou=Policies,dc=domain [..]

That's exactly how you should implement what you want to achieve: Use pwdPolicySubentry instead of attaching pwdPolicy attrs to the entry itself.

Ciao, Michael.