I finally found my problem. Our uid starts with a lower number so I have to change system-auth and password-auth the uid number from 500 to ours. Password policy worked as expected then. -- 389-users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx