h >>passwordHistory is not set in your policy config, thus it is not beingen forced: yes it is, i had set it the last many years pls see the screendump in my first thread Policy settings from GUI: www.chezmoi.dk/389-passwd-not-expire.png bt Tuan _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx