I'm moving from ODSEE to OpenLDAP and need to replace our current method of assigning password policies. We're using class-of-service. Is there any way to replicate this in OpenLDAP? Basically I want to assign a virtual attribute (pwdpolicysubentry) based on the value of another attribute (objectclass). For example users with objectclass: x would have pwdpolicysubentry:x and users with objectclass: y would have pwdpolicysubentry:y

Thanks, Nick