Configuring Subtree/User Password Policy Using The Command-Line - Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual

Configuring Subtree/User Password Policy Using the
Command-Line
To configure a subtree or user level password policy:
Add the required attributes to the subtree or user entries by running the
1.
ns-newpwpolicy.pl
The command syntax for the script is as follows:
ns-newpwpolicy.pl [-D rootDN] { -w password | -w - | -j filename } [-p
port] [-h host] -U userDN -S suffixDN
For updating a subtree entry, use the
the option. Note that the
-U
or subtree entry at a time. It can, however, accept both user and suffix entries at
the same time. For details about the script, see the Netscape Directory Server
Configuration, Command, and File Reference.
The script adds the required attributes depending on the whether the target
entry is a subtree or user entry.
For a subtree (for example,
following entries are added:
A container entry (
holding various password policy related entries for the subtree and all
its children. For example:
dn: cn=nsPwPolicyContainer, ou=people, dc=example, dc=com
objectClass: top
objectClass: nsContainer
cn: nsPwPolicyContainer
The actual password policy specification entry (
holding all the password policy attributes that are specific to the
subtree. For example:
dn: cn="cn=nsPwPolicyEntry, ou=people, dc=example, dc=com",
cn=nsPwPolicyContainer, ou=people, dc=example, dc=com
objectclass: top
objectclass: extensibleObject
objectclass: ldapsubentry
objectclass: passwordpolicy
script.
option. For updating a user entry, use
-S
ns-newpwpolicy.pl
ou=people, dc=example, dc=com
nsPwPolicyContainer
Managing the Password Policy
script accepts only one user
), the
) at the subtree level for
nsPwPolicyEntry
Chapter 7 User Account Management
) for
273