dn: ou=Policies,${LDAP_SUFFIX}
changetype: add
ou: Policies
objectClass: top
objectClass: organizationalUnit

dn: cn=passwordDefault,ou=Policies,${LDAP_SUFFIX}
changetype: add
objectClass: pwdPolicy
objectClass: person
objectClass: top
cn: passwordDefault
sn: passwordDefault
pwdAttribute: ${LDAP_PWD_ATTRIBUTE}
pwdCheckQuality: ${LDAP_PWD_CHECK_QUALITY}
pwdMinAge: 0
pwdMaxAge: 0
pwdMinLength: ${LDAP_PWD_MIN_LENGTH}
pwdInHistory: 5
pwdMaxFailure: ${LDAP_PWD_MAX_FAILURE}
pwdFailureCountInterval: ${LDAP_PWD_FAILURE_COUNT_INTERVAL}
pwdLockout: TRUE
pwdLockoutDuration: ${LDAP_PWD_LOCKOUT_DURATION}
pwdAllowUserChange: TRUE
pwdExpireWarning: 0
pwdGraceAuthNLimit: 0
pwdMustChange: FALSE
pwdSafeModify: TRUE