Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual page 288

Managing the Password Policy
H
For a user (for example,
following entries are added:
H
H
288 Red Hat Directory Server Administrator's Guide • May 2005
objectclass: costemplate
objectclass: ldapsubentry
cosPriority: 1
pwdpolicysubentry: cn="cn=nsPwPolicyEntry, ou=people,
dc=example, dc=com", cn=nsPwPolicyContainer, ou=people,
dc=example, dc=com
The CoS specification entry at the subtree level. For example:
dn: cn=nsPwPolicy_cos, ou=people, dc=example, dc=com
objectclass: top
objectclass: LDAPsubentry
objectclass: cosSuperDefinition
objectclass: cosPointerDefinition
cosTemplateDn: cn="cn=nsPwTemplateEntry, ou=people,
dc=example, dc=com", cn=nsPwPolicyContainer, ou=people,
dc=example, dc=com
cosAttribute: pwdpolicysubentry default operational
uid=jdoe, ou=people, dc=example, dc=com
A container entry (
nsPwPolicyContainer
various password policy related entries for the user and all its children.
For example:
dn: cn=nsPwPolicyContainer, ou=people, dc=example, dc=com
objectClass: top
objectClass: nsContainer
cn: nsPwPolicyContainer
The actual password policy specification entry (
holding the password policy attributes that are specific to the user. For
example:
dn: cn="cn=nsPwPolicyEntry, uid=jdoe, ou=people,
dc=example, dc=com", cn=nsPwPolicyContainer, ou=people,
dc=example, dc=com
objectclass: top
objectclass: extensibleObject
objectclass: ldapsubentry
objectclass: passwordpolicy
) at the parent level for holding
nsPwPolicyEntry
), the
) for