Overview#

Modify-password is a DirXML operation which is typically seen only when going to the IDV, we modify the nspmDistributionPassword and for a small portion of the Subscriber Channel.

Modify-password cause a Password Modify Operation

Publisher Channel#

Normally, in the Publisher Channel in the Command Transformation Policy Set there is a DirXML-Rule of: "Add payload data to password operations". This rule is responsible to convert the the Modify-password to a modify of the nspmDistributionPassword.

So on the Publisher Channel, we will see Modify-password all the way until this rule in the Command Transformation Policy Set and we will not see the modify of the nspmDistributionPassword.

 Applying rule 'Add payload data to password operations'.
      Action: do-append-xml-element("password-publish-status","operation-data").
      Action: do-append-xml-element("association","operation-data/password-publish-status").
      Action: do-append-xml-text("operation-data/password-publish-status/association",token-association()).
        arg-string(token-association())
          token-association()
            Token Value: "9f5b003d1c1926428095a6540ad2b09a".
          Arg Value: "9f5b003d1c1926428095a6540ad2b09a".
Policy returned:
...
  <input>
    <modify class-name="User" dest-dn="net\willeke\people\Int\sic\syncmon" dest-entry-id="33027" event-id="pwd-publish" src-dn="CN=SYNCMON,OU=Services,OU=NSC Managed,OU=Accounts,DC=willeke,DC=net">
      <association>9f5b003d1c1926428095a6540ad2b09a</association>
      <modify-attr attr-name="nspmDistributionPassword" enforce-password-policy="false"><!-- content suppressed -->
      </modify-attr>
      <operation-data>
        <password-publish-status>
          <association>9f5b003d1c1926428095a6540ad2b09a</association>
        </password-publish-status>
      </operation-data>
    </modify>
  </input>
</nds>

Subscriber Channel#

When coming from IDV, we see the nspmDistributionPassword transformed to a Modify-password Operation in the Subscriber Channel Command Transformation Policy Set and typically a rule Convert modifies of a nspmDistributionPassword attribute to a Modify-password operation.

This implies on the Subscriber Channel, we will only see a Modify-password from the in the Command Transformation Policy Set after this rule.

 <input>
    <modify cached-time="20140814174102.584Z" class-name="User" event-id="idv01#20140814174102#6#1:403f6205-11ba-431b-3a8c-05623f40ba11" qualified-src-dn="dc=net\dc=nationwidedir\OU=people\OU=Int\uniqueID=HAUGEA1" src-dn="\NWPROD\net\willekedir\people\Int\HAUGEA1" src-entry-id="130296" timestamp="1408038046#23">
      <association state="associated">c481ef56b3fa2943857ad4d801d41ec0</association>
      <modify-attr attr-name="nspmDistributionPassword"><!-- content suppressed -->
      </modify-attr>
    </modify>
  </input>
...
 Applying rule 'Convert modifies of a nspmDistributionPassword attribute to a modify password operation'.

  <input>
    <modify-password class-name="User" event-id="pwd-subscribe" qualified-src-dn="dc=net\dc=willekedir\OU=people\OU=Int\uniqueID=HAUGEA1" src-dn="\NWPROD\net\willekedir\people\Int\HAUGEA1" src-entry-id="130296">
      <association>c481ef56b3fa2943857ad4d801d41ec0</association>
      <password><!-- content suppressed --></password>
    </modify-password>
  </input>

More Information#

There might be more information for this subject on one of the following: ...nobody