OpenLDAP ppolicy

--- snip /etc/ldap/slapd.conf --- # ppolicy schema include /etc/ldap/schema/ppolicy.schema moduleload ppolicy.la overlay ppolicy ppolicy_default "cn=default,ou=PasswordPolicy,dc=patrick-preuss,dc=de" ppolicy_use_lockout --- snip /etc/ldap/slapd.conf --- --- snip default.ldif --- dn: cn=default,ou=PasswordPolicy,dc=patrick-preuss,dc=de objectClass: device objectClass: pwdPolicy objectClass: top cn: default pwdAttribute: userPassword pwdAllowUserChange: TRUE pwdCheckQuality: 1 pwdExpireWarning: 432000 pwdFailureCountInterval: 0 pwdGraceAuthNLimit: 0 pwdInHistory: 0 pwdLockout: FALSE pwdLockoutDuration: 1920 pwdMaxAge: 7516800 pwdMaxFailure: 4 pwdMinLength: 6 pwdMustChange: TRUE pwdSafeModify: FALSE --- snip default.ldif --- --- snip peruser.ldif --- dn: cn=Patrick Marc Preuss,ou=People,dc=patrick-preuss,dc=de changetype: modify add: pwdPolicySubentry pwdPolicySubentry: cn=noexpire,ou=PasswordPolicy,dc=patrick-preuss,dc=de --- snip peruser.ldif ---