Can someone who implemented ppolicy on FreeBSD please enlighten me on how this is done with the cn=config backend? Openldap can be really frustrating at times!