!!! Overview [{$pagename}] has an [OID] of [2.16.840.1.113719.1.39.43.4.100] is a [bitmask] and part of the [Edirectory Password Policy] !! [eDirectory] [LDAP] [Attribute] Definition The [{$pagename}] [AttributeTypes] is defined as: * [OID] of [2.16.840.1.113719.1.39.43.4.100] * [NAME|Attribute-Name]: [{$pagename}] * DESC: * [EQUALITY]: [] * [ORDERING]: [] * SYNTAX: [1.3.6.1.4.1.1466.115.121.1.27] [Integer] (Really a [bitmask]) * [SINGLE-VALUE] * USAGE [userApplications] * [Extended Flags]: ** [X-NDS_NOT_SCHED_SYNC_IMMEDIATE]: 1 * Used as [MUST] in: ** * Used [MAY] in: ** [nspmPasswordPolicy] !! [{$pagename}] Values %%warning Different [eDirectory Versions] and [nspmConfigurationOptions] [MAY] change this behavior. For [example], there are options to __NOT__ sync the [NDS Password] and/or the [Simple Password]. %% We have found some [bitmask] values for [{$pagename}] attribute options (reading from [LDAP] - non zero = true): %%zebra-table %%sortable %%table-filter ||[bit]||[Hex]||Description |0000000001|0x00000001|On set [password] request the [NDS Password] [hash] will be removed by [Secure Password Manager] |0000000010|0x00000002|On set [password] request the [NDS Password] [hash] will not be set by [Secure Password Manager] |0000000100|0x00000004|On set [password] request the [Simple Password] will not be set by [Secure Password Manager] |0000001000|0x00000008|([SPM_ALLOW_SPWD_SET]) specifies that the [Simple Password] can be set even when [Universal Password] is enabled. For this option to work it is necessary that the option to synchronize the [Simple Password] with the [Universal Password] is enabled in the [Edirectory Password Policy]. |0000010000|0x00000010|Allow [password] retrieval by self (User) |0000100000|0x00000020|Allow [password] retrieval by admin (Admin Is this Admin or any object with Supervisor Rights over the [LDAP Entry]) |0001000000|0x00000040|Allow [password] retrieval by a trusted app such as [DirXML] to read the [password]. Appears this causes [Universal Password] to sync to the [nspmDistributionPassword] (thanks [Dr. Axel SchnellbĂGel]) |0010000000| |Reserved |0100000000|0x00000100|[Password] enabled |1000000000|0x00000200|Advanced [password] policy enabled /% /% /% !! Category %%category [eDirectory]%% !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]