Márcio Luciano Donada wrote:
Michael Ströder escreveu:
I guess you did not enable slapo policy in your slapd configuration. Please read the man page I referenced carefully.
I read admin configuration in the OpenLDAP.org [1] subsession slapo-ppolicy.
And did you actually add these lines to your slapd.conf as described therein (tweaked to match your suffix)?
overlay ppolicy ppolicy_default "cn=default,ou=policies,dc=example,dc=com"
objectClass: pwdPolicy objectClass: person objectClass: top
[..] ldap_add: Invalid syntax (21) additional info: objectClass: value #0 invalid per syntax
Again: This strongly indicates that the object class 'pwdPolicy' is not defined in the subschema. This particular object class is hard-coded within slapo-ppolicy. So I suspect you did not enable this overlay in your slapd.conf.
I followed the documentation
Sorry, I suspect you didn't.
Ciao, Michael.