This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 50 lines
!!! Overview
[{$pagename}] has an [OID] of [2.16.840.1.113719.1.39.43.4.100] is a [bitmask] and part of the [Edirectory Password Policy]
!! [eDirectory] [LDAP] [Attribute] Definition
The [{$pagename}] [AttributeTypes] is defined as:
* [OID] of [2.16.840.1.113719.1.39.43.4.100]
* [NAME|Attribute-Name]: [{$pagename}]
* DESC:
* [EQUALITY]: []
* [ORDERING]: []
* SYNTAX: [1.3.6.1.4.1.1466.115.121.1.27] [Integer] (Really a [bitmask])
* [SINGLE-VALUE]
* USAGE [userApplications]
* [Extended Flags]:
** [X-NDS_NOT_SCHED_SYNC_IMMEDIATE]: 1
* Used as [MUST] in:
**
* Used [MAY] in:
** [nspmPasswordPolicy]
!! [{$pagename}] Values
%%warning
Different [eDirectory Versions] and [nspmConfigurationOptions] [MAY] change this behavior. For [example], there are options to __NOT__ sync the [NDS Password] and/or the [Simple Password].
%%
We have found some [bitmask] values for [{$pagename}] attribute options (reading from [LDAP] - non zero = true):
%%zebra-table
%%sortable
%%table-filter
||[bit]||[Hex]||Description
|0000000001|0x00000001|On set [password] request the [NDS Password] [hash] will be removed by [Secure Password Manager]
|0000000010|0x00000002|On set [password] request the [NDS Password] [hash] will not be set by [Secure Password Manager]
|0000000100|0x00000004|On set [password] request the [Simple Password] will not be set by [Secure Password Manager]
|0000001000|0x00000008|([SPM_ALLOW_SPWD_SET]) specifies that the [Simple Password] can be set even when [Universal Password] is enabled. For this option to work it is necessary that the option to synchronize the [Simple Password] with the [Universal Password] is enabled in the [Edirectory Password Policy].
|0000010000|0x00000010|Allow [password] retrieval by self (User)
|0000100000|0x00000020|Allow [password] retrieval by admin (Admin Is this Admin or any object with Supervisor Rights over the [LDAP Entry])
|0001000000|0x00000040|Allow [password] retrieval by a trusted app such as [DirXML] to read the [password]. Appears this causes [Universal Password] to sync to the [nspmDistributionPassword] (thanks [Dr. Axel SchnellbÃGel])
|0010000000| |Reserved
|0100000000|0x00000100|[Password] enabled
|1000000000|0x00000200|Advanced [password] policy enabled
/%
/%
/%
!! Category
%%category [eDirectory]%%
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]