include /etc/openldap/schema/core.schema include /etc/openldap/schema/ppolicy.schema moduleload /usr/lib64/openldap/ppolicy.la database bdb suffix dc=example,dc=com directory /var/lib/ldap rootdn "cn=Manager,dc=example,dc=com" rootpw secret access to * by * manage database monitor rootdn "cn=Manager,cn=Monitor" rootpw secretmonitor overlay ppolicy