[389-users] "disallow_pw_change_aci" ACI problem
Hi everybody ,
we have a company multi-master 389DS confifuration, with 2 different
root subtrees, password policy is active for one subtree only.
Users are actually not able to change their own password, because the
presence of an automatically created aci:
aci: (targetattr = "userPassword") ( version 3.0; acl
"disallow_pw_change_aci" ; deny (write ) userdn = "ldap:///self";)
ACI is probably recreated because one subtree has password policy disabled.
Does anyone have some hint to share?
Thank you
Ramon