Otoh, making it user modifiable was a mistake and broke the rfc specification, which says it&#39;s a NO-USER-MODIFI<span></span>ABLE attribute.<br><br>Le samedi 19 décembre 2015,  &lt;<a href="mailto:ludovic.poitou@gmail.com">ludovic.poitou@gmail.com</a>&gt; a écrit :<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>In my opinion, the pwdPolicySubentry attribute should be read-only generated by the server.  <div><br></div><div>We had made the error in Sun Directory Server to allow customers to set it manually, and it was very confusing that the attribute served 2 roles : a way to find the pwd policy entry applicable for the entry, and a way to set a different or new policy for an account. </div><div><br></div><div>In OpenDJ ( and all other servers from the same code base) we use 2 different attributes. That separation made it easier to handle for applications and administrators. </div><div><br></div><div>My 2 cents</div><div><br></div><div>Ludo</div><div><br> <div style="width:338px"></div>
</div></div></div>
</blockquote><br><br>-- <br>Regards,<br>Cordialement,<br>Emmanuel Lécharny<br><a href="http://www.iktek.com">www.iktek.com</a><br>