Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual page 275

The actual password policy specification entry (
holding the password policy attributes that are specific to the user. For
example:
dn: cn="cn=nsPwPolicyEntry, uid=jdoe, ou=people,
dc=example, dc=com", cn=nsPwPolicyContainer, ou=people,
dc=example, dc=com
objectclass: top
objectclass: extensibleObject
objectclass: ldapsubentry
objectclass: passwordpolicy
Assign the value of the above entry DN to the
attribute of the target entry. For example:
dn: uid=jdoe, ou=people, dc=example, dc=com
changetype: modify
replace: pwdpolicysubentry
pwdpolicysubentry: "cn=nsPwPolicyEntry, uid=jdoe,
ou=people, dc=example, dc=com", cn=nsPwPolicyContainer,
ou=people, dc=example, dc=com
Set the password policy attributes of subtree or user entry with the
2.
appropriate values.
Table 7-1 describes the attributes you can use to configure your password
policy. You may use the
entry.
cn=config
NOTE The
nsslapd-pwpolicy-local
controls the type of password policy the server enforces. By
default, this attribute is disabled (
disabled, the server only checks for and enforces the global
password policy; the subtree and user level password policies are
ignored.
When you run the
the specified subtree and user entries and, if they exist, modifies
them. After updating the entries successfully, the script sets the
nsslapd-pwpolicy-local
If you don't want to enable the subtree and user level password
policy, be sure to set
run the script.
utility to change these attributes in the
ldapmodify
attribute of the
off
ns-newpwpolicy.pl
configuration parameter to
nsslapd-pwpolicy-local
Chapter 7
Managing the Password Policy
nsPwPolicyEntry
pwdpolicysubentry
cn=config
). When the attribute is
script, it first checks for
.
on
to after you
off
User Account Management
) for
entry
275