hi All thanks it is solved by now Mark, sorry I didn't realized it was set at my home setup. I found it from GUI -> the organisation > right click -> manage passwrd policy -> subtree , it was SET i had unflag, it Works now as it should. MANY thanks for your patience. [root@centos6 ~]# ldapsearch -xLLL -ZZ -b dc=centos '(&(uid=tnng))' passwordRetryCount passwordExpWarned accountUnlockTime passwordExpirationTime passwordHistory createtimestamp modifytimestamp retryCountResetTime passwordAllowChangeTime nsRoleDN dn: cn=Tuan Nguyen,cn=unixtek,ou=Infrastructure,dc=centos passwordRetryCount: 0 passwordExpWarned: 0 passwordExpirationTime: 19700101000000Z passwordHistory: 20170304222529Z{SSHA}AojU851CxYPIxN/VzMyHy18iqPRc+s6TMbeveQ== passwordHistory: 20170304222549Z{SSHA}uhl3WQQzMweRzx/dK+OVrvJ+DcCnVlzT5J2QlA== createtimestamp: 20170301203823Z modifytimestamp: 20170304222549Z passwordAllowChangeTime: 20170305222549Z _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx