Hi Simon, does that mean that it is impossible to achieve the goal with the Account Policy Plugin or some other plugin? It could be that the plugin indeed is designed to achieve it but it could not because of bugs, or it simply is not designed to do this. Your idea means to go the other way round. We have to check if that way which requires a higher configuration effort is acceptable. Thanks, Eugen _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx