Hi,
Thanks for the help.
1- Yes users can change their passwords.
2 - In the log I don't have much, I didn't change the verbosity of the server
But I did something else and I don't really understand it.
My first configuration of Password Policy was Global and by the way I have a master slave installation.
Reading the Directory Server Documentation, I found that I can create a specific Password Policy, so I took the ou=people,dc=example,dc=com and I created a new Password Policy and this time the policy worked, users may change their passwords.
But I had another "issue", i don't know if I can call it that way. The documentation says that the Password Policy get bypassed when using the Admin account or the Directory Manager to change user password, but I got two behaviors :
- if I change the user password using the cmd line with ldappasswd, the policy get enforced even when using Directory Manager to make the change.
- if I change the user password using 389DS Console, the
policy get bypassed when using Directory Manager to make the
change.
So in conclusion I have :
- The global password policy is not working.
- The local policy is working, but with different behaviors.
For now I am using the local Password Policy because it's doing the job...
Regards.