LDAPWiki: NspmComplexityRules

Overview#

NspmComplexityRules determine the Password Quality for Universal Password Policy

We are not certain this is technically supported and the normal iManager interface does not, at least as of when we last observed imanager, provide a dialog to work with the NspmComplexityRules attribute.

NspmComplexityRules allow more flexibility than the "normal" imanager dialog to modify the Password-composition Policy for nspmPasswordPolicyDN

NspmComplexityRules Content#

NspmComplexityRules is a base64 encoded attribute and when decoded you would see something similar to:

<ComplexityPolicies>
  <RuleSet>
    <Rule MinPwdLen="6" />
    <Rule MaxPwdLen="128" />
  </RuleSet>
  <RuleSet ViolationsAllowed="1">
    <Rule MinUppercase="1" />
    <Rule MinLowercase="1" />
    <Rule MinNumeric="1" />
    <Rule MinSpecial="1" />
  </RuleSet>
</Policy>

LDAP Attribute Definition#

The NspmComplexityRules AttributeTypes is defined as:

OID of 2.16.840.1.113719.1.39.43.4.231
NAME: NspmComplexityRules
DESC:
EQUALITY:
ORDERING:
SYNTAX: 1.3.6.1.4.1.1466.115.121.1.5 Binary
SINGLE-VALUE
USAGE UserApplications
Extended Flags:
- X-NDS_NOT_SCHED_SYNC_IMMEDIATE: 1
Used as MUST in:
Used MAY in:
- nspmPasswordPolicy

More Information#

There might be more information for this subject on one of the following: