That did the trick and makes sense. I was following a tutorial online that had the ldif I was trying to add... Much thanks..

-Mike

Date: Fri, 22 Oct 2010 10:06:28 +0530 From: aravind.divakaran@yukthi.com To: mlstarling31@hotmail.com CC: openldap-technical@openldap.org Subject: Re: Applying individual password policies

On 10/22/2010 06:40 AM, Michael Starling wrote:

OPENLDAP 2.43

I have a default password policy working OK but I'd like to override the default policy for one individual.

I create the policy and add this LDIF without any problems.

dn: cn=user,ou=Policies,dc=mdvcat,dc=lott

cn: user

objectClass: pwdPolicy

objectClass: person

objectClass: top

sn: Password Policy

pwdAttribute: UserPassword

pwdMaxAge: 0

pwdLockout: FALSE

pwdMinLength: 10

I then try to apply the policy to a user with the following LDIF

dn: uid=ldapmgr,ou=people,dc=mdvcat,dc=lott

changetype: modify

add: pwdPolicySubentry

pwdPolicy: cn=user,ou=Policies,dc=mdvcat,dc=lott

The attribute is pwdPolicySubentry not pwdPolicy.

dn: uid=ldapmgr,ou=people,dc=mdvcat,dc=lott

changetype: modify

add: pwdPolicySubentry

pwdPolicySubentry: cn=user,ou=Policies,dc=mdvcat,dc=lott

Try the above ldif.

- Aravind

I receive the following error.

ldapadd -f ldapmgr.ldif -x -D cn=root,dc=mdvcat,dc=lott -W

Enter LDAP Password:

modifying entry "uid=ldapmgr,ou=people,dc=mdvcat,dc=lott"

ldapadd: Undefined attribute type (17)

additional info: pwdPolicy: attribute type undefined

Any help would be appreciated

Thanks,

-Mike