From b0dcf7ff30231ec5fb505180453035682582e573 Mon Sep 17 00:00:00 2001 From: neil_a_wilson <neil_a_wilson@localhost> Date: Wed, 15 Nov 2006 16:25:47 +0000 Subject: [PATCH] Update the password policy implementation to use ds-pwp-password-policy-dn instead of pwdPolicySubentry for indicating which password policy should be applied for a given user. The new attribute is not marked NO-USER-MODIFICATION so that it can be directly altered by administrators in addition to having a value populated by a virtual attribute. The pwdPolicySubentry attribute is defined in the IETF draft as NO-USER-MODIFICATION and is only intended to be virtually defined, making it more difficult to configure a special policy for an individual user. --- opendj-sdk/opends/resource/config/config.ldif | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/opendj-sdk/opends/resource/config/config.ldif b/opendj-sdk/opends/resource/config/config.ldif index e5e89f5..5657997 100644 --- a/opendj-sdk/opends/resource/config/config.ldif +++ b/opendj-sdk/opends/resource/config/config.ldif @@ -854,7 +854,7 @@ objectClass: ds-cfg-password-policy cn: Root Password Policy ds-cfg-password-attribute: userPassword -ds-cfg-default-password-storage-scheme: SSHA512 +ds-cfg-default-password-storage-scheme: SSHA ds-cfg-allow-expired-password-changes: false ds-cfg-allow-multiple-password-values: false ds-cfg-allow-pre-encoded-passwords: false @@ -1030,7 +1030,7 @@ ds-rlim-size-limit: 0 ds-rlim-time-limit: 0 ds-rlim-lookthrough-limit: 0 -pwdPolicySubentry: cn=Root Password Policy,cn=Password Policies,cn=config +ds-pwp-password-policy-dn: cn=Root Password Policy,cn=Password Policies,cn=config dn: cn=Root DSE,cn=config objectClass: top -- Gitblit v1.10.0