issue handled.  missing pwdCheckModuleArg in the password policy (apparently not using ppm.conf anymore).  once added to the schema the password change works.



Kevin Martin

On Fri, Aug 27, 2021 at 7:42 PM Quanah Gibson-Mount <> wrote:

--On Friday, August 27, 2021 5:47 PM -0500 kevin martin <>

> Howard, I DID use ppm in 2.4 and there's a compile warning with ppm in
> that:

If you are using OpenLDAP 2.5, then you should be compiling the version of
the ppm module that ships with it in contrib/slapd-modules/ppm.  Or to be
more clear, all modules you're using should be the 2.5 versions of the
modules and not the 2.4 versions.  I.e., same deal with the ppolicy overlay.

Please provide your ppolicy configuration (for the ppolicy overlay), both
the configuration from slapd.conf/cn=config AND the LDIF entry for whatever
you have defined the default policy to be or whatever policy it is that
applies to the entries you are modifying.



Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP: