Later on I used command: /usr/lib64/dirsrv/slapd-cbdds1/ns-newpwpolicy.pl -D "cn=directory manager" -w - -U "uid=xinhuan,ou=people,dc=christianbook,dc=com" The script works fine with below output: adding new entry "cn=nsPwPolicyContainer,ou=people,dc=christianbook,dc=com" adding new entry "cn=cn\=nsPwPolicyEntry\,uid\=xinhuan\,ou\=people\,dc\=christianbook\,dc\=com,cn=nsPwPolicyContainer,ou=people,dc=christianbook,dc=com" modifying entry "uid=xinhuan,ou=people,dc=christianbook,dc=com" modifying entry "cn=config" However, none of the password policy I set into nsPwPolicyEntry worked. - xinhuan -- 389-users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx