Re: ppolicy not respecting overrides

[Michael Ströder <michael@stroeder.com>]

Michael Proto wrote:
> I'm currently seeing an issue with slapo-ppolicy and individual account
> overrides not being respected.
> [..]
> What I've done in the interim is create a new ppolicy container with no
> expiration and assigned my system account's pwdPolicySubentry attribute to
> that:
> 
> # NoPasswordPolicy, Policies, domain
> dn: cn=NoPasswordPolicy,ou=Policies,dc=domain
> [..]

That's exactly how you should implement what you want to achieve:
Use pwdPolicySubentry instead of attaching pwdPolicy attrs to the entry itself.

Ciao, Michael.