Re: (ITS#5648) ppolicy controls entries without objectclass pwdPolicy

[michael@stroeder.com]

dieter@dkluenter.de wrote:
> man slapo-ppolicy(5) says that the overlay depends on objectclass pwdPolicy and
> Every  account that should be subject to password policy control should have
> pwdPolicySubentry...
> But ppolicy is controlling every enty, even those without attribute pwdPolicy
> and attribute pwdPolicySubentry.
> I have created a test entry, which is not subject to password policy but got
> locked out after 3 binds with wrong password.

Do you have 'ppolicy_default' set in slapd.conf?
What happens if you remove that?

Ciao, Michael.