(ITS#4025) Ppolicy overlay: objectIdentifierMatch rule doesn't understand descriptions

[stran@amnh.org]

Full_Name: Samuel Tran
Version: 2.3.7
OS: Debian Linux Sarge
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (66.114.85.133)


I am trying to implement the password policy overlay.

When I try to create a dn that would hold the password policy, I get the
following error:

stran@educ236:~$ ldapmodify -vv -x -W -D
"uid=stran,ou=people,dc=example,dc=com" -H ldap://localhost -f
passwd_cn.ldif 
ldap_initialize( ldap://localhost )
Enter LDAP Password: 
replace cn:
        password
replace objectClass:
        organizationalRole
        pwdPolicy
replace pwdattribute:
        userpassword
modifying entry "cn=password,ou=Policies,dc=example,dc=com"
modify complete
ldap_modify: Invalid syntax (21)
        additional info: pwdattribute: value #0 invalid per syntax