> Check the access log for the server, and you may also need to turn on the trace level > error logging. Here's what I can find in the logs - it seems to find the OU policy but doesn't do anything with it? PK [13/Nov/2006:18:54:10 -0500] - => find_entry_internal (dn=cn="cn=nspwpolicyentry ,ou=people,dc=blah,dc=com",cn=nspwpolicycontainer,ou=people,dc=blah,dc =com) lock 0 [13/Nov/2006:18:54:10 -0500] - => dn2entry "cn="cn=nspwpolicyentry,ou=people,dc= blah,dc=com",cn=nspwpolicycontainer,ou=people,dc=blah,dc=com" [13/Nov/2006:18:54:10 -0500] - <= dn2entry d59d30 [13/Nov/2006:18:54:10 -0500] - <= find_entry_internal_dn found (cn="cn=nspwpolic yentry,ou=people,dc=blah,dc=com",cn=nspwpolicycontainer,ou=people,dc=sho pzi lla,dc=com) [13/Nov/2006:18:54:10 -0500] - candidate list has 1 ids [13/Nov/2006:18:54:10 -0500] - => id2entry( 500 ) [13/Nov/2006:18:54:10 -0500] - <= id2entry d59d30 (cache) [13/Nov/2006:18:54:10 -0500] - => send_ldap_search_entry (cn="cn=nsPwPolicyEntry ,ou=People,dc=blah,dc=com",cn=nsPwPolicyContainer,ou=People,dc=blah,dc =com) [13/Nov/2006:18:54:10 -0500] - <= send_ldap_search_entry [13/Nov/2006:18:54:10 -0500] - => send_ldap_result 0:: [13/Nov/2006:18:54:10 -0500] - <= send_ldap_result [13/Nov/2006:18:54:10 -0500] - => send_ldap_result 0:: [13/Nov/2006:18:54:10 -0500] - add_pb
