[keycloak-user] Password policy not enforced?

I have setup keycloak with the default realm and an openldap server. I have then set a certain password policy and set an action on the user's that they need to change password when they login the next time however when they login and change their passwords they are able to set a password which does not comply with the password policy. Anybodu ran into this issue? Is this a known bug maybe?