Re: How to enable 'pwdPolicySubentry' in ppolicy.schema

Alexey Shalin wrote:

Hello,

How to enable 'pwdPolicySubentry' in ppolicy.schema, I added this into ppolicy.schema

Never modify the schema files distributed with OpenLDAP.

attributetype ( 1.3.6.1.4.1.42.2.27.8.1.23

   NAME 'pwdPolicySubentry'

   DESC 'The pwdPolicy subentry in effect for this object'

   EQUALITY distinguishedNameMatch

   SYNTAX 1.3.6.1.4.1.1466.115.121.1.12

   SINGLE-VALUE

   USAGE directoryOperation )

But after that my slapd do not started.

Of course.

Schema files are only for defining user attributes. Operational attributes must be implemented in code and cannot be defined from a schema config file.

This particular attribute is already implemented in the ppolicy overlay so there is no need to define it again anyway.

should I upgrade openldap to the last ver ?

That would make no difference here, but it's always best to stay up to date.