5440
5440
<P>There are two ways password policy can be applied to individual objects:</P>
5441
5441
<P>1. The pwdPolicySubentry in a user's object - If a user's object has a pwdPolicySubEntry attribute specifying the DN of a policy object, then the policy defined by that object is applied.</P>
5442
5442
<P>2. Default password policy - If there is no specific pwdPolicySubentry set for an object, and the password policy module was configured with the DN of a default policy object and if that object exists, then the policy defined in that object is applied.</P>
5444
5444
<H3><A NAME="Further Information">12.10.3. Further Information</A></H3>
5445
5445
<P><EM>slapo-ppolicy(5)</EM></P>
5446
5446
<H2><A NAME="Referential Integrity">12.11. Referential Integrity</A></H2>