Hi team.

When following the instructions on this page, this command fails with the message:

[root@rluds11 ~]# dsconf testds11 plugin account-policy config-entry add "cn=config,cn=Account Policy Plugin,cn=plugins,cn=config" --always-record-login yes --state-attr lastLoginTime --alt-state-attr 1.1 --spec-attr acctPolicySubentry --limit-attr accountInactivityLimit
Error: 105 - 3 - 68 - Already exists - [] - add_ext_s((dn: cn=config,cn=Account Policy Plugin,cn=plugins,cn=config
altstateattrname: 1.1
alwaysRecordLogin: yes
cn: config
limitattrname: accountInactivityLimit
objectclass: top
objectclass: extensibleObject
specattrname: acctPolicySubentry
stateattrname: lastLoginTime

,),{'serverctrls': None, 'clientctrls': None, 'escapehatch': 'i am sure'}) on instance testds11

I do not know if the "cn=config,cn=Account Policy Plugin,cn=plugins,cn=config" entry is created during installation or when running the previous commands to activate the plugin, but it already exists.

I had to use 'dsconf  plugin account-policy config-entry set .." instead of "dsconf  plugin account-policy config-entry add .." to set the plugin configuration entry.

Let me know if you need more information.

Cheers,
/Runar (rlundgre)

Reported by: rhn-support-rlundgren

https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/account-policy-plugin#annotations:d50af12f-5ebc-4656-904c-8fa32371ae22