Only one policy is effective for a user at a time. Novell Modular Authentication Services (NMAS) determines which policy is effective for a user by looking for
policies in the following order and applying the first one it finds. In which order does NMAS look for password policies?