So I'm still on this.  Since I'm running cn=config rather than slapd.conf, I'm confused as to where to put the:

overlay ppolicy

I don't have a:  database mdb

Here's my slapd.ldif that I loaded in (with the added olcModuleload you told me to add):

dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /var/lib/openldap/slapd.args
olcPidFile: /var/lib/openldap/slapd.pid

dn: cn=schema,cn=config
objectClass: olcSchemaConfig
cn: schema

dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulepath: /usr/libexec/openldap
olcModuleload: back_mdb.la
olcModuleload ppolicy.so

# Include more schemas in addition to default core
include: file:///etc/openldap/schema/core.ldif
include: file:///etc/openldap/schema/cosine.ldif
include: file:///etc/openldap/schema/nis.ldif
include: file:///etc/openldap/schema/inetorgperson.ldif
include: file:///etc/openldap/schema/sudo.ldif

dn: olcDatabase=frontend,cn=config
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: frontend
olcAccess: to dn.base="cn=Subschema" by * read
olcAccess: to *
  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage
  by * none

dn: olcDatabase=config,cn=config
objectClass: olcDatabaseConfig
olcDatabase: config
olcRootDN: cn=config
olcAccess: to *
  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage
  by * none


So where would I put the:  overlay ppolicy


Thanks,
Eric

On Tue, Mar 7, 2023 at 12:21 PM Quanah Gibson-Mount <quanah@fast-mail.org> wrote:


--On Tuesday, March 7, 2023 12:16 PM -0700 Eric Fetzer
<eric.fetzer@gmail.com> wrote:

>
> I'm using 2.6.4.  Sorry, brand new at this, how do I enable it?  I
> don't see any references to it in the slapd.conf...  I'm in the process
> of converting an ISDS db to OpenLDAP.  Kind of daunting so far...


Generally speaking:

In the portion of your configuration loading module:

modulepath ....
moduleload ppolicy.so


In the database section of your configuration where you want to apply
password policies


database mdb
...

overlay ppolicy


Regards,
Quanah