From 2c7b8d6d8c0c177e8089272140dae66b87852ff7 Mon Sep 17 00:00:00 2001 From: neil_a_wilson <neil_a_wilson@localhost> Date: Tue, 17 Jul 2007 21:59:32 +0000 Subject: [PATCH] Implement support for password history functionality. The password history can be maintained either based on the number of previous passwords to remember (e.g., a user cannot re-use any of his/her last five passwords), or the length of time the previous passwords have been retained (e.g., a user cannot re-use any password he/she has had within the last 365 days), or both. --- opends/resource/schema/02-config.ldif | 9 ++++++++- 1 files changed, 8 insertions(+), 1 deletions(-) diff --git a/opends/resource/schema/02-config.ldif b/opends/resource/schema/02-config.ldif index 00341bd..82bba2c 100644 --- a/opends/resource/schema/02-config.ldif +++ b/opends/resource/schema/02-config.ldif @@ -1478,6 +1478,12 @@ attributeTypes: ( 1.3.6.1.4.1.26027.1.1.443 NAME 'ds-cfg-state-update-failure-policy' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'OpenDS Directory Server' ) +attributeTypes: ( 1.3.6.1.4.1.26027.1.1.444 + NAME 'ds-cfg-password-history-count' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 + X-ORIGIN 'OpenDS Directory Server' ) +attributeTypes: ( 1.3.6.1.4.1.26027.1.1.445 + NAME 'ds-cfg-password-history-duration' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 + X-ORIGIN 'OpenDS Directory Server' ) objectClasses: ( 1.3.6.1.4.1.26027.1.2.1 NAME 'ds-cfg-access-control-handler' SUP top STRUCTURAL MUST ( cn $ ds-cfg-acl-handler-class $ ds-cfg-acl-handler-enabled ) @@ -1807,7 +1813,8 @@ ds-cfg-require-change-by-time $ ds-cfg-require-secure-authentication $ ds-cfg-require-secure-password-changes $ ds-cfg-skip-validation-for-administrators $ - ds-cfg-state-update-failure-policy ) X-ORIGIN 'OpenDS Directory Server' ) + ds-cfg-state-update-failure-policy $ ds-cfg-password-history-count $ + ds-cfg-password-history-duration ) X-ORIGIN 'OpenDS Directory Server' ) objectClasses: ( 1.3.6.1.4.1.26027.1.2.63 NAME 'ds-cfg-jmx-connection-handler' SUP ds-cfg-connection-handler STRUCTURAL MUST ( ds-cfg-listen-port $ ds-cfg-ssl-cert-nickname $ -- Gitblit v1.10.0