This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
PasswordExpirationTime
PasswordExpirationTime

Version management

Difference between version and

At line 1 added 68 lines
!!! Overview
[{$pagename}] has an [OID] of [2.16.840.1.113719.1.1.4.1.68] and is the value when [Password Expiration] occurs. (Not considering [Grace Logins])
The value is set on a user whenever a [Password Modify Operation] happens or whenever a [Edirectory Password Policy] is set for "Number of days before password expires" which will set the [{$pagename}] value on the user.
[{$pagename}] can be set to an "earlier" time than the calculated setting form the [Edirectory Password Policy] and the value will be honored. [{$pagename}] can NOT be se to a later value.
%%warning
When using [EDirectory], to to make the [{$pagename}] effective, you must also Enable [Grace Logins].
%%
Some setting similaer to:
* [loginGraceLimit]: 1
* [loginGraceRemaining]: 0
!! How is the password expiration time calculated when using the [NMAS] [Universal Password]?
The determination of whether a user's [NMAS] [Universal Password] has [expired|Password Expired] is __not__ totally based on using the date and time value for the [{$pagename}] [Attribute Value] for a user. It is used but is first calculated dynamically on login then compared to it.
The [Universal Password] [Password Expired] [Algorithm] performs the following calculations:
* Lookup the [entity]'s associated [Edirectory Password Policy] [PasswordExpirationInterval] [Attribute Value]
* Examine the [entity]'s [nspmPassword] attribute timestamp ([PwdChangedTime]).
* Add the [PasswordExpirationInterval] to the [nspmPassword] modification timestamp ([PwdChangedTime]) on the [entity].
* If this value less than [{$pagename}] [Attribute Value]? then the [{$pagename}] value is updated.
* Compare [{$pagename}] value to the current server time to determine if the [Password Expired].
!! [{$pagename}] is calculated
[{$pagename}] is calculated by adding the [passwordExpirationInterval] to the [pwdChangedTime].
[{$pagename}] is calculated when there is a [Password Modify Operation] (determined from the [PwdChangedTime]) and and it is recalculated during login if the [passwordExpirationInterval] has been changed to a shorter amount of time or if the [Edirectory Password Policy] has been changed.
!! [Password Reset] and [{$pagename}]
[Edirectory Administrative Password Changes] may affect the values for [{$pagename}].
!! [LDAP] [Attribute] Definition
The [{$pagename}] [AttributeTypes] is defined as:
* [OID] of [2.16.840.1.113719.1.1.4.1.68]
* [NAME|Attribute-Name]: [{$pagename}]
* [DESC]:
* [OBSOLETE flag] (only if present)
* [Supertype]:
** (only if present)
* [EQUALITY]: []
* [ORDERING]: []
* [SYNTAX]: [1.3.6.1.4.1.1466.115.121.1.24] [GeneralizedTime]
* [SINGLE-VALUE]
* [NO-USER-MODIFICATION] (only if present)
* [USAGE]: [UserApplications]
* [Extended Flags]:
** [X-ORIGIN]: []
** [X-NDS_NAME]: Password Expiration Time
** [X-NDS_NONREMOVABLE]: 1
* Used as [MUST] in:
**
* Used as [MAY] in:
** [inetOrgPerson]
** [ndsLoginProperties]
** [nspmPasswordAux]
** [Template]
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [How NMAS calculates and modifies the password expiration time when using the Universal Password|https://support.microfocus.com/kb/doc.php?id=7016942|target='_blank'] - based on information obtained 2020-03-29
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop