!!! Overview
The [{$pagename}] [SupportedControl] that can be used to request information about the current password policy state for a user entry.
The [{$pagename}] [SupportedControl] is defined in [draft-behera-ldap-password-policy]
Both the [{$pagename}] and [passwordPolicyResponse] controls have the same OID of [1.3.6.1.4.1.42.2.27.8.5.1].
The request control does not have a value.
The [PasswordPolicyResponse] value is encoded.
!! [Example] [LDAPSEARCH]
[Example] To Search Using the Password Policy Control.
The Password Policy Control allows a client to request information about the current password policy information for a user entry.
You can specify the Password Policy Control with ldapsearch in a number of ways:
* OID. Use the --control or -J option with the Password Policy Control OID: 1.3.6.1.4.1.42.2.27.8.5.1 with no value.
* Named constant. Use the named constants, pwpolicy or passwordpolicy with the --control or -J option instead of the Password Policy Control OID. For example, use -J pwpolicy or -J passwordpolicy with ldapsearch.
Option. Use the --usePasswordPolicyControl option.
%%information
The -J or --control option is used to specify which controls to use in a search request. The --usePasswordPolicyControl option is used for bind requests.
%%
Run the ldapsearch command with the --usePasswordPolicyControl option.
%%prettify
{{{
$ ldapsearch -h localhost -p 1389 -D "cn=Directory Manager" -w password -b dc=example,dc=com -s base --usePasswordPolicyControl "(objectclass=*)"
}}} /%
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]