Password Policy.
The pwpol package has two checks: Password Policy <> User/Container
Password Policy versus User/Container. The attributes " nsimAssignments" and " nspmPasswordPolicyDN" are checked against eachother.