On Fri, May 09, 2025 at 10:00:08AM +0000, Windl, Ulrich wrote: > I fail to see where slapd.conf comes into play with handling of > pwdPolicySubentry: > Both the policies and the users are defined in a different (MDB) database. > Only the default policy may be stored in the config database directly, and I > did not talk about that.
Yes, and as I indicated before, in my testing, everything but a default policy was being adjusted by refint just fine. The reason default policy was not is because it is set in the configuration and what we've moved onto. If you can reproduce a set up where a pwdPolicySubentry is stored on the account's entry, refint is properly configured and a rename of the corresponding policy entry does not trigger an update of the account contrary to refint documentation, please post it here or better, file an issue. Thanks, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP
