Hi, I am using ppolicy overlay control password policy. Now I would like to define 3 different policies as policyDN. In slapd.conf one can only define a defaultDN, how can a policyDN declared in an entry? Or is editing the operational attribute pwdPolicySubentray with relax control the only way? -Dieter -- Dieter Klünter | Systemberatung http://www.dkluenter.de GPG Key ID:8EF7B6C6