Hi there,

I have a problem with ppolicy and got stuck finding a solution.
I am using openldap-2.4.40-9 Oracle 7.2, the lock seems to be ignored.

This what I have configured
dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModuleLoad: ppolicy.la
olcModulePath: /usr/lib64/openldap



dn: olcOverlay=ppolicy,olcDatabase={2}hdb,cn=config
objectClass: olcPPolicyConfig
olcOverlay: ppolicy
olcPPolicyDefault: cn=ppolicy,ou=policies,dc=ddd
olcPPolicyUseLockout: TRUE
olcPPolicyHashCleartext: TRUE



dn: cn=ppolicy,ou=policies,dc=ddd
objectClass: top
objectClass: device
objectClass: pwdPolicyChecker
objectClass: pwdPolicy
cn: ppolicy
pwdAttribute: userPassword
pwdAllowUserChange: TRUE
pwdInHistory: 4
pwdMinLength: 8
pwdMaxFailure: 6
pwdFailureCountInterval: 1800
pwdCheckQuality: 1
pwdMustChange: TRUE
pwdGraceAuthNLimit: 3
pwdMaxAge: 3600
pwdExpireWarning: 31536000
pwdLockoutDuration: 900
pwdLockout: TRUE
pwdCheckModule: pwcheck.la


and I tried to add the attribute
pwdReset: TRUE
and
pwdAccountLockedTime: 20110214195250Z

in a specific user, however, the user is not locked and I do not even been ask to change the password

Here is what happens

ldapwhoami -e ppolicy -x -D  "uid=ldap001,ou=People,dc=ddd" -W -h localhost

Enter LDAP Password: 
dn:uid=ldap001,ou=People,dc=ddd

Any idea what I should check