On 02/27/2018 03:15 PM, Alberto Viana wrote:
> Hey Mark,
>
> Another question, what is the right way to disable a subtree policty
> (could not found anything in the docs, even the RHDS)?
>
> Just delete the policy entry (nsPwPolicyEntry and nsPwTemplateEntry)?
Correct, it can not be turned off. It exists or doesn't. When it's not
present the global policy takes effect.
>
>
> And once I did that, the global policy takes over?
>
> Thanks
>
> On Tue, Feb 27, 2018 at 4:59 PM, Mark Reynolds <mreynolds(a)redhat.com
> <mailto:mreynolds@redhat.com>> wrote:
>
>
>
> On 02/27/2018 02:30 PM, Alberto Viana wrote:
>> Mark,
>>
>> Thanks a lot.
> No problem Alberto!
>>
>> On Tue, Feb 27, 2018 at 4:28 PM, Mark Reynolds
>> <mreynolds(a)redhat.com <mailto:mreynolds@redhat.com>> wrote:
>>
>>
>>
>> On 02/27/2018 02:22 PM, Alberto Viana wrote:
>>> I think I was not clear enough,
>>>
>>> I have 2 users under cn=config (my replication users) under
>>> dn: cn=config
>>>
>>> uid=rep389,cn=config
>>> uid=repad,cn=config
>>>
>>> If I set a global password policy, this policy applies to
>>> these users?
>> Yes it does
>>>
>>> Tanks
>>>
>>> On Tue, Feb 27, 2018 at 3:58 PM, Mark Reynolds
>>> <mreynolds(a)redhat.com <mailto:mreynolds@redhat.com>> wrote:
>>>
>>> Correct, all the "global" password policy settings are
>>> stored in the cn=config entry.
>>>
>>>
>>> On 02/27/2018 01:24 PM, Alberto Viana wrote:
>>>> Hi guys,
>>>>
>>>> When I enable global password policy, is that suppose
>>>> to affect cn=config?
>>>>
>>>> I Just want to confirm that.
>>>>
>>>>
>>>> _______________________________________________
>>>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org
>>>> <mailto:389-users@lists.fedoraproject.org>
>>>> To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>>>> <mailto:389-users-leave@lists.fedoraproject.org>
>>>
>>>
>>
>>
>
>