389-Directory/1.3.2.17 B2014.182.124


I'm trying to add an user (whitout using the manager, with a regular user):

Without any aci:

ldap_add: Insufficient access (50)
additional info: Insufficient 'add' privilege to the 'userPassword' attribute


My aci:

dn: ou=test,dc=my,dc=domain
changetype: modify
add: aci
aci: (targetattr = "*") (target = "ldap:///test,dc=my,dc=domain") (version 3.0;acl "POP-AL write permission";allow (all) (userdn = "ldap:///uid=my_user,ou=app,dc=my,dc=domain");)

Also tried without "target" with same result.

ldap_add: Constraint violation (19)
additional info: invalid password syntax - passwords with storage scheme are not allowed


I have an older serverĀ 389-Directory/1.3.2.17 B2014.182.124, and this works fine.
What am I missing in the newer version? Or is that a bug?

Thanks

Alberto Viana