Red Hat DIRECTORY SERVER 7.1 - DEPLOYMENT Deployment Manual page 165

For a subtree (for example,
changes are required:
• Add a container entry (
various password policy-related entries for the subtree and all its children. For
example:
dn: cn=nsPwPolicyContainer, ou=people, dc=example, dc=com
objectClass: top
objectClass: nsContainer
cn: nsPwPolicyContainer
• Add a password policy specification entry (
the password policy attributes that are specific to the subtree. For example:
dn: cn="cn=nsPwPolicyEntry, ou=people, dc=example, dc=com",
cn=nsPwPolicyContainer, ou=people, dc=example, dc=com
objectclass: top
objectclass: ldapsubentry
objectclass: passwordpolicy
• Add a CoS template entry (
pwdpolicysubentry
For example:
dn: cn="cn=nsPwTemplateEntry, ou=people, dc=example, dc=com",
cn=nsPwPolicyContainer, ou=people, dc=example, dc=com
objectclass: top
objectclass: extensibleObject
objectclass: costemplate
objectclass: ldapsubentry
cosPriority: 1
pwdpolicysubentry: cn="cn=nsPwPolicyEntry, ou=people,
dc=example, dc=com", cn=nsPwPolicyContainer, ou=people,
dc=example, dc=com
• Add a CoS specification entry (
example:
dn: cn=nsPwPolicy_cos, ou=people, dc=example, dc=com
objectclass: top
objectclass: LDAPsubentry
objectclass: cosSuperDefinition
objectclass: cosPointerDefinition
cosTemplateDn: cn="cn=nsPwTemplateEntry, ou=people,
dc=example, dc=com", cn=nsPwPolicyContainer, ou=people,
dc=example, dc=com
cosAttribute: pwdpolicysubentry default operational-default
ou=people, dc=example, dc=com
nsPwPolicyContainer
nsPwTemplateEntry
value pointing to the above (
nsPwPolicy_cos
Designing a Password Policy
), the following
) at the subtree level for holding
) for holding all
nsPwPolicyEntry
) that has the
nsPwPolicyEntry
) at the subtree level. For
Chapter 8 Designing a Secure Directory
) entry.
165