<?xml version="1.0" encoding="UTF-8"?>
<!--
 ! CDDL HEADER START
 !
 ! The contents of this file are subject to the terms of the
 ! Common Development and Distribution License, Version 1.0 only
 ! (the "License").  You may not use this file except in compliance
 ! with the License.
 !
 ! You can obtain a copy of the license at
 ! trunk/opends/resource/legal-notices/OpenDS.LICENSE
 ! or https://OpenDS.dev.java.net/OpenDS.LICENSE.
 ! See the License for the specific language governing permissions
 ! and limitations under the License.
 !
 ! When distributing Covered Code, include this CDDL HEADER in each
 ! file and include the License file at
 ! trunk/opends/resource/legal-notices/OpenDS.LICENSE.  If applicable,
 ! add the following below this CDDL HEADER, with the fields enclosed
 ! by brackets "[]" replaced with your own identifying information:
 !      Portions Copyright [yyyy] [name of copyright owner]
 !
 ! CDDL HEADER END
 !
 !
 !      Portions Copyright 2007 Sun Microsystems, Inc.
 ! -->

<adm:managed-object
     name="password-modify-extended-operation-handler"
     plural-name="password-modify-extended-operation-handlers"
     package="org.opends.server.admin.std"
     extends="extended-operation-handler"
     xmlns:adm="http://www.opends.org/admin"
     xmlns:ldap="http://www.opends.org/admin-ldap">

  <adm:synopsis>
    The <adm:user-friendly-name /> provides the ability for end users to change
    their own passwords, or for administrators to reset user passwords.
  </adm:synopsis>

  <adm:description>
    The password modify extended operation is defined in RFC 3062.  It includes
    the ability for users to provide their current password for further
    confirmation of their identity when changing the password, and it also
    includes the ability to generate a new password if the user doesn't provide
    one.
  </adm:description>

  <adm:profile name="ldap">
    <ldap:object-class>
      <ldap:name>ds-cfg-password-modify-extended-operation-handler</ldap:name>
      <ldap:superior>ds-cfg-extended-operation-handler</ldap:superior>
    </ldap:object-class>
  </adm:profile>

  <adm:property-override name="java-class">
    <adm:default-behavior>
      <adm:defined>
        <adm:value>
          org.opends.server.extensions.PasswordModifyExtendedOperation
        </adm:value>
      </adm:defined>
    </adm:default-behavior>
  </adm:property-override>

  <adm:property name="identity-mapper" mandatory="true">
    <adm:synopsis>
      Specifies the name of the identity mapper that should be used in
      conjunction with the password modify extended operation.
    </adm:synopsis>
    <adm:description>
      This property will be used to identify a user based on an
      authorization ID in the 'u:' form. Changes to this property will
      take effect immediately.
    </adm:description>
    <adm:syntax>
      <adm:aggregation relation-name="identity-mapper"
        parent-path="/">
        <adm:target-needs-enabling-condition>
          <adm:contains property="enabled" value="true" />
        </adm:target-needs-enabling-condition>
        <adm:target-is-enabled-condition>
          <adm:contains property="enabled" value="true" />
        </adm:target-is-enabled-condition>
      </adm:aggregation>
    </adm:syntax>
    <adm:profile name="ldap">
      <ldap:attribute>
        <ldap:name>ds-cfg-identity-mapper</ldap:name>
      </ldap:attribute>
    </adm:profile>
  </adm:property>
</adm:managed-object>