On 03/02/2017 06:06 PM, tuan88(a)gmail.com wrote:
hi mark
Again, never use the "local subtree password policy",
Yes you are:
[root@centos6 scripts]# ldapsearch -xLLL -ZZ -b
cn='cn\3DnsPwPolicyEntry\2Cou\3DInfrastructure\2Cdc\3Dnnit,cn=nsPwPolicyContainer,ou=Infrastructure,dc=nnit'
-s base '(&(objectclass=passwordpolicy))'
dn: cn=cn\3DnsPwPolicyEntry\2Cou\3DInfrastructure\2Cdc\3Dnnit,cn=nsPwPolicyCon
tainer,ou=Infrastructure,dc=nnit
Remove this entry
dn:
cn=cn\3DnsPwPolicyEntry\2Cou\3DInfrastructure\2Cdc\3Dnnit,cn=nsPwPolicyContainer,ou=Infrastructure,dc=nnit
I dont know how and I never want to use it. I prefer the global one,
see Again this screendump
www.chezmoi.dk/389-passwd-not-expire.png
it is how I set the password policy, only one place not other place. I attach the ldif
for the whole database here so you can see the settings.
www.chezmoi.dk/centos.new.ldif
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org