Overview#
NspmConfigurationOptions has an OID of 2.16.840.1.113719.1.39.43.4.100 is a bitmask and part of the Edirectory Password PolicyeDirectory LDAP Attribute Definition#
The NspmConfigurationOptions AttributeTypes is defined as:- OID of 2.16.840.1.113719.1.39.43.4.100
- NAME: NspmConfigurationOptions
- DESC:
- EQUALITY:
- ORDERING:
- SYNTAX: 1.3.6.1.4.1.1466.115.121.1.27 Integer (Really a bitmask)
- SINGLE-VALUE
- USAGE userApplications
- Extended Flags:
- Used as MUST in:
- Used MAY in:
NspmConfigurationOptions Values#
Different eDirectory Versions and nspmConfigurationOptions MAY change this behavior. For example, there are options to NOT sync the NDS Password and/or the Simple Password.
We have found some bitmask values for NspmConfigurationOptions attribute options (reading from LDAP - non zero = true):
| bit | Hex | Description |
|---|---|---|
| 0000000001 | 0x00000001 | On set password request the NDS Password hash will be removed by Secure Password Manager |
| 0000000010 | 0x00000002 | On set password request the NDS Password hash will not be set by Secure Password Manager |
| 0000000100 | 0x00000004 | On set password request the Simple Password will not be set by Secure Password Manager |
| 0000001000 | 0x00000008 | (SPM_ALLOW_SPWD_SET) specifies that the Simple Password can be set even when Universal Password is enabled. For this option to work it is necessary that the option to synchronize the Simple Password with the Universal Password is enabled in the Edirectory Password Policy. |
| 0000010000 | 0x00000010 | Allow password retrieval by self (User) |
| 0000100000 | 0x00000020 | Allow password retrieval by admin (Admin Is this Admin or any object with Supervisor Rights over the LDAP Entry) |
| 0001000000 | 0x00000040 | Allow password retrieval by a trusted app such as DirXML to read the password. Appears this causes Universal Password to sync to the nspmDistributionPassword (thanks Dr. Axel SchnellbĂGel) |
| 0010000000 | Reserved | |
| 0100000000 | 0x00000100 | Password enabled |
| 1000000000 | 0x00000200 | Advanced password policy enabled |
