Michael Proto wrote:> [..]
> I'm currently seeing an issue with slapo-ppolicy and individual account
> overrides not being respected.
> What I've done in the interim is create a new ppolicy container with no> [..]
> expiration and assigned my system account's pwdPolicySubentry attribute to
> that:
>
> # NoPasswordPolicy, Policies, domain
> dn: cn=NoPasswordPolicy,ou=Policies,dc=domain
That's exactly how you should implement what you want to achieve:
Use pwdPolicySubentry instead of attaching pwdPolicy attrs to the entry itself.
Ciao, Michael.