This workshop walks through configuring OpenLDAP with the ppolicy overlay,

focusing on common aspects of account and password management in a directory.

We start with a simple set up covering expiry, lockout and password quality

rules, then we progressively expand in both scale:

- targeted policy assignment

- replication with read-only replicas chaining back to providers

and features:

- idle account expiration

- per-policy hash selection

- transparent rehashing on login

By the end, attendees will have hands-on experience managing a production-grade

environment, covering both the current OpenLDAP feature set and the new

capabilities introduced in the 2.7 release stream.