[389-users] add user aci problem

[Alberto Viana]

389-Directory/1.3.2.17 B2014.182.124


I'm trying to add an user (whitout using the manager, with a regular user):

Without any aci:

ldap_add: Insufficient access (50)
additional info: Insufficient 'add' privilege to the 'userPassword'
attribute


My aci:

dn: ou=test,dc=my,dc=domain
changetype: modify
add: aci
aci: (targetattr = "*") (target = "ldap:///test,dc=my,dc=domain")
(version
3.0;acl "POP-AL write permission";allow (all) (userdn =
"ldap:///uid=my_user,ou=app,dc=my,dc=domain");)

Also tried without "target" with same result.

ldap_add: Constraint violation (19)
additional info: invalid password syntax - passwords with storage scheme
are not allowed


I have an older server 389-Directory/1.3.2.17 B2014.182.124, and this works
fine.
What am I missing in the newer version? Or is that a bug?

Thanks

Alberto Viana