Red Hat DIRECTORY SERVER 8.1 - DEPLOYMENT Deployment Manual page 130

Chapter 8. Designing a Secure Directory
Figure 8.1. Password Policy Checking Process
In addition to bind requests, password policy checking also occurs during add and modify operations if
the userPassword attribute (explained in the following section) is present in the request.
Modifying the value of userPassword checks two password policy settings:
• The password minimum age policy is activated. If the minimum age requirement has not been
satisfied, the server returns a constraintViolation error. The password update operation fails.
• The password history policy is activated. If the new value of userPassword is in the password
history, or if it is the same as the current password, the server returns a constraintViolation error.
The password update operation fails.
Both adding and modifying the value of userPassword checks password policies set for the
password syntax:
120