--On Monday, September 11, 2017 3:01 PM +0200 Jacques Loonen j.loonen@ru.nl wrote:

Hi Jacques,

We use cn = config, so we load ppolicy.ldif. pwdaccountlockedtime is not included in this file.

It is not included in ppolicy.schema or ppolicy.ldif. It is a hard-coded part of the ppolicy overlay. My guess is that while you included the ppolicy overlay in your slapd.conf configuration, you failed to properly load it when using cn=config.

Regards, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com