On 02/27/2018 03:15 PM, Alberto Viana wrote:
Hey Mark,

Another question, what is the right way to disable a subtree policty (could not found anything in the docs, even the RHDS)?

Just delete the policy entry (nsPwPolicyEntry and nsPwTemplateEntry)?
Correct, it can not be turned off.  It exists or doesn't.  When it's not present the global policy takes effect.

And once I did that, the global policy takes over?


On Tue, Feb 27, 2018 at 4:59 PM, Mark Reynolds <mreynolds@redhat.com> wrote:

On 02/27/2018 02:30 PM, Alberto Viana wrote:

Thanks a lot.
No problem Alberto!

On Tue, Feb 27, 2018 at 4:28 PM, Mark Reynolds <mreynolds@redhat.com> wrote:

On 02/27/2018 02:22 PM, Alberto Viana wrote:
I think I was not clear enough,

I have 2 users under cn=config (my replication users) under dn: cn=config


If I set a global password policy, this policy applies to these users?
Yes it does


On Tue, Feb 27, 2018 at 3:58 PM, Mark Reynolds <mreynolds@redhat.com> wrote:
Correct, all the "global" password policy settings are stored in the cn=config entry.

On 02/27/2018 01:24 PM, Alberto Viana wrote:
Hi guys,

When I enable global password policy, is that suppose to affect cn=config?

I Just want to confirm that.

389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org