hi mark Again, never use the "local subtree password policy", I dont know how and I never want to use it. I prefer the global one, see Again this screendump www.chezmoi.dk/389-passwd-not-expire.png it is how I set the password policy, only one place not other place. I attach the ldif for the whole database here so you can see the settings. www.chezmoi.dk/centos.new.ldif _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx