Michael Proto wrote:
> I'm currently seeing an issue with slapo-ppolicy and individual account
> overrides not being respected.

> [..]

> What I've done in the interim is create a new ppolicy container with no
> expiration and assigned my system account's pwdPolicySubentry attribute to
> that:
>
> # NoPasswordPolicy, Policies, domain
> dn: cn=NoPasswordPolicy,ou=Policies,dc=domain

> [..]

That's exactly how you should implement what you want to achieve:
Use pwdPolicySubentry instead of attaching pwdPolicy attrs to the entry itself.

Ciao, Michael.