---
title: List subentry password policies
description: Per-server password policies are part of the DS server configuration. Use the dsconfig command to list, read, and edit them.
component: pingds
version: 8.1
page_id: pingds:security-guide:pwp-subentries
canonical_url: https://docs.pingidentity.com/pingds/8.1/security-guide/pwp-subentries.html
revdate: 2025-10-22T14:42:39Z
keywords: ["Features", "LDAP", "Security", "Setup & Configuration"]
---

# List subentry password policies

Per-server password policies are part of the DS server configuration. Use the `dsconfig` command to list, read, and edit them.

Subentry policies are part of the DS directory data. Use the `ldapsearch` command to list and read them.

The following command lists the subentry password policies under `dc=example,dc=com`:

```console
$ ldapsearch \
 --hostname localhost \
 --port 1636 \
 --useSsl \
 --trustStorePath /path/to/opendj/config/keystore \
 --trustStoreType PKCS12 \
 --trustStorePassword:file /path/to/opendj/config/keystore.pin \
 --bindDN uid=kvaughan,ou=people,dc=example,dc=com \
 --bindPassword bribery \
 --baseDn dc=example,dc=com \
 "(&(objectClass=subEntry)(objectClass=ds-pwp-password-policy))"
```

> **Collapse: Show output**
>
> ```
> dn: cn=NIST inspired policy,dc=example,dc=com
> objectClass: top
> objectClass: subentry
> objectClass: ds-pwp-password-policy
> objectClass: ds-pwp-validator
> objectClass: ds-pwp-length-based-validator
> objectClass: ds-pwp-dictionary-validator
> cn: NIST inspired policy
> ds-pwp-default-password-storage-scheme: PBKDF2-HMAC-SHA512
> ds-pwp-dictionary-data:: <data>
> ds-pwp-length-based-min-password-length: 8
> ds-pwp-password-attribute: userPassword
> ```