Re: Enabling Password Policy Messages via Extended Controls in OpenLDAP

[Shawn McKinney <smmtech2@sbcglobal.net>]

--- "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> wrote:

> Extensions which are "works in progress" are
> generally not
> advertised in slapd(8)'s root DSE.   The Password
> Policy
> LDAP extension specification, as well as our
> implementation
> of this specification, are works in progress and
> hence not
> advertised in the root DSE.

That makes sense.

> 
> To enable the extension in slapd(8), see
> slapo-ppolicy.

Not sure what your mean here.  I've enabled the
ppolicy overlay module via configure tool during build
of server.  It's working great, just want to read the
warning messages that may be generated in response to
a user bind request.

> To enable the extension in OpenLDAP command line
> tools,
> see the man page for the tool (or the usage
> statement).

Again, is this in addition to the work I've already
done to enable the ppolicy module?

If I'm reading this right, there is another step that
I've got to take to enable the control messages back
to the client for ppolicy.

Which command line tool does this?

Sorry for the stupid questions, I'm trying to read all
I can on this topic, but just can't seem to put it all
together.

Thanks,

Shawn