Oh Thank you Mark  ! that solved my error with the passwd syntax  attribute cfg.

From: Mark Reynolds [mailto:mreynolds@redhat.com]
Sent: September 22, 2021 11:35 AM
To: General discussion list for the 389 Directory server project. <389-users@lists.fedoraproject.org>; Ghiurea, Isabella <Isabella.Ghiurea@nrc-cnrc.gc.ca>
Subject: Re: [389-users] attribute passwordMinLength cfg issues/error

***ATTENTION*** This email originated from outside of the NRC. ***ATTENTION*** Ce courriel provient de l'extérieur du CNRC

On 9/22/21 1:52 PM, Ghiurea, Isabella wrote:

As part of user global policy we need to  configure  user password min length , see my  cfg in dse.ldif , when trying to update  a user password to a   password with length > 0 seeing the following error:.

I think you meant "length > 8".  Looks like when you turn on syntax checking it defaults passwordMinCategories to "3" even though its not listed inthe config.  Set it to this:

passwordMinCategories: 1

Mark

Result: Constraint violation (19)

Additional info: Failed to update password

Is there a plugin  I need to install or what I am missing from this cfg ?

Here is my only changes I have in dse.ldif :

nsslapd-pwpolicy-inherit-global: on

nsslapd-pwpolicy-local: off

passwordTrackUpdateTime: on

passwordCheckSyntax: on

passwordMinLength: 8

Isabella

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

-- 
Directory Server Development Team