Hi!

AFAIR you'll have to change your password at least once when you never had used policy to enable the aging mechanism used by policy.

Kind regards, Ulrich Windl

-----Original Message----- From: Marco Gaiarin gaio@lilliput.linux.it Sent: Sunday, January 5, 2025 4:14 PM To: openldap-technical@openldap.org Subject: [EXT] Enabling PPolicy on a live LDAP...

I need to enable PPolicy overlay to control passord policy on an existing LDAP installation.

I have to expect some 'breakage'? Or policy attributes get defined only explicitly and have decent default?

Speaking plainly: i have to expect to be cut off of my LDAP account immediately because i have my password old?

Thanks.

--