I'm moving from ODSEE to OpenLDAP and need to replace our current method of assigning password policies.  We're using class-of-service.  Is there any way to replicate this in OpenLDAP?  Basically I want to assign a virtual attribute (pwdpolicysubentry) based on the value of another attribute (objectclass).  For example users with objectclass: x would have pwdpolicysubentry:x and users with objectclass: y would have pwdpolicysubentry:y