2

Just wondering if OpenLDAP is able to assign a password policy to a specific group? Thanks

Ke Wang
  • 23
  • 2

1 Answers1

3

If you mean by group, groupOfNames or similar the response is unfortunately no.

From:

man slapo-ppolicy

Every account that should be subject to password policy control should have a pwdPolicySubentry attribute containing the DN of a valid pwdPolicy entry

  • According to this link: http://www.openldap.org/lists/openldap-technical/201402/msg00317.html You are correct! – Ke Wang Feb 03 '17 at 12:49