Hi,

I am using 389-ds-base-1.3.7.5-28.el7_5.x86_64 on CentOS7 All is up to date.

I configured a password policy, and I checked User may change password, but when I try

[root@idm01 ~]# ldappasswd -p 389 -h idm01.example.com -ZZ -x -D "uid=jane.doe,ou=people,dc=example,dc=com" -W -a oldpass -s newpass


I get :
Result: Server is unwilling to perform (53)
Additional info: User is not allowed to change password


any idea?

Regards.