Re: ppolicy overlay unable to set pwdAccountLockedTime on to-be-locked users due to ACLs
--On Thursday, December 22, 2016 11:23 AM +0100 Matthieu Cerda kegeruneku+openldap@ironflake.org wrote:
Hello Howard and Ozgur,
My answers are inlined in the following text.
I attached a copy of the slapd.conf if you would like to take a look.
Your slapd.conf has no rootdn configured. You need to configure it if you want ppolicy to function correctly.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
Thank you very much Quanah !
Do you think adding a note about mandatory rootdn setting in slapo-ppolicy manpage would be a worthy contribution ? (I'll gladly submit a patch)
Or did I just miss something in the manpage or another one ?
Happy new year to you and the OpenLDAP / Symas team, Regards, -- Matthieu CERDA
Le 28/12/2016 à 20:27, Quanah Gibson-Mount a écrit :
--On Thursday, December 22, 2016 11:23 AM +0100 Matthieu Cerda kegeruneku+openldap@ironflake.org wrote:
Hello Howard and Ozgur,
My answers are inlined in the following text.
I attached a copy of the slapd.conf if you would like to take a look.
Your slapd.conf has no rootdn configured. You need to configure it if you want ppolicy to function correctly.
Regards, Quanah
openldap-technical@openldap.org
-
Matthieu Cerda -
Quanah Gibson-Mount