issue handled. missing pwdCheckModuleArg in the password policy (apparently not using ppm.conf anymore). once added to the schema the password change works.

---

Regards,

Kevin Martin

On Fri, Aug 27, 2021 at 7:42 PM Quanah Gibson-Mount quanah@symas.com wrote:

--On Friday, August 27, 2021 5:47 PM -0500 kevin martin ktmdms@gmail.com

wrote:

...

Howard, I DID use ppm in 2.4 and there's a compile warning with ppm in that:

If you are using OpenLDAP 2.5, then you should be compiling the version of the ppm module that ships with it in contrib/slapd-modules/ppm. Or to be more clear, all modules you're using should be the 2.5 versions of the modules and not the 2.4 versions. I.e., same deal with the ppolicy overlay.

Please provide your ppolicy configuration (for the ppolicy overlay), both the configuration from slapd.conf/cn=config AND the LDIF entry for whatever you have defined the default policy to be or whatever policy it is that applies to the entries you are modifying.

Regards, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com