LDAPWiki: DirXML-PasswordSyncStatus

Overview#

DirXML-PasswordSyncStatus

LDAP Attribute Definition#

The DirXML-PasswordSyncStatus AttributeTypes is defined as:

OID of 2.16.840.1.113719.1.14.4.1.79
NAME: DirXML-PasswordSyncStatus
DESC:
EQUALITY:
ORDERING:
SYNTAX: 1.3.6.1.4.1.1466.115.121.1.15
USAGE UserApplications
Used as MUST in:
Used MAY in:
- DirXML-PasswordSyncStatusUser

Understanding DirXML-PasswordSyncStatus Attribute[1]#

When a password synchronization operation is triggered on a user, the user's DirXML-PasswordSyncStatus attribute gets updated with the status of the <modify-password> operation. The value looks like:

39DB7DED8436EE4DF38039DB7DED843620140325141422721000000000001Code(-8032) Operation vetoed by policy

The values represented are:

The first 32 bytes represent the GUID of the driver the user is associated with: 39DB7DED8436EE4DF38039DB7DED8436
The next 17 bytes represent the password sync time in yyyyMMddHHmmssSSS format: 2014-03-25-14:14:22:721
The next 8 bytes are 00000000
The next 4 bytes indicate any one of the following status codes: (00001)
- 0000: ERROR
- 0001: WARNING
- 0002: RETRY
- 0003: FATAL
- 0004: SUCCESS
The next string is the status message, if any: Code(-8017) Operation vetoed by object creation policy.

More Information#

There might be more information for this subject on one of the following:

[#1] - Understanding DirXML-PasswordSyncStatus Attribute - based on information obtained 2014-05-12