Overview#

Password MUST Change is a Account Restriction in many Password Management implementations where the LDAP Entry MUST perform a Password Change.

Some known Implementations:

• draft-behera-ldap-password-policy - has a pwdMustChange
• Microsoft Active Directory - pwd-Last-Set attribute where a value of 0 indicates an admin-required password change
• CA Directory - has an Attribute DxPwdMustChange
• Edirectory Administrative Password Changes

Password MUST Change is often REQUIRED following an Administrative Password Reset

More Information#

There might be more information for this subject on one of the following:

• Draft-behera-ldap-password-policy
• DxPwdMustChange
• Password Change
• Password Recovery
• Password Reset
• Pwd-Last-Set attribute
• PwdMustChange