Tested with 7.1.2 and 1.0.2, same result.
The Password Policy Request/Response Control does not work. I have
written code to test it, as well as tested it with an OpenLDAP 2.3
client tool which supports sending the control request and decoding the
The control request is sent to the server, but it is not returned to
I enabled the password syntax checking and then tried to change the
password to one which would obviously fail.
-a foobar \
-s foo \
-D "uid=jacksonm,ou=users,dc=netauth,dc=com" \
-w foobar \
Result: Constraint violation (19)
Additional info: Failed to update password
This is only the error from the modify password operation, but nothing
from the password policy response. I expected a response equivalent to
the corresponsong ASN schema: "passwordTooShort".
Is this a bug, or are there some secret switches to toggle to get the
password policy controls working?