Setting password expiry using the SDK

Without using the iDS console, meaning just by using the SDK, could I set the period for password expiry?
Since the userPassword is a multi-value attribute, how can I differentiate between which is the password for signing-onto the server and which are passwords for other applications?

If you mean to configure the password policy using the SDK, a Modify operation for the base object "cn=config" and replacing the value of "PasswordMaxAge" attribute will work.
If you intend to set a specific expiration time for a specific user, you should not do this and let the server set the expiration time based on the configured password ploicy.
For more information on the password policy configuration, you can refer to the Administration Guide.
Also, although userPassword is multivalued, the pasword policy as currently defined in the Directory server suppose that the userPassword attribute contains only 1 value. If the password contains more than 1 value, the result of the password policy is undefined.
And there is no way to differentiate between passwords.
Regards,
Ludovic.

Similar Messages

  • Set password policy using iPlanet SDK

    I know there'a a few such post lying around and iPlanet has a few documentations, but I still can't find what I need.
    Specifically, I need to use the SDK for Java to do:
    1. setting of password expiration (on/off)
    2. setting of expiration warning (on/off)
    3. password syntax checking (on/off)
    4. password length (set to desired length)
    5. password min age (set to desired duration)
    6. password history (enabled/disabled)
    7. password storage scheme (set to SHA/SHA/cleartext)
    The iDS deployment documentation gives a good explanation on all these, but I can't find any codes/examples on how to do them using the SDK at all.
    Does anyone knows where I can find such examples?
    Thanks.

    Sorry, please ignore this post. I've found what I need.

  • I changed my password and used the new computer, next time I tried to log in it wouldn't accept the password. I tried the old one as well but that doesn't work either. Can anyone help?

    I changed my password and used the new computer, next time I tried to log in it wouldn't accept the password. I tried the old one as well but that doesn't work either. Can anyone help?

    Boot to the Recovery HD:
    Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
    When the menubar appears select Terminal from the Utilities menu. Enter resetpassword at the prompt and press RETURN. Follow instructions in the dialog window that will appear.
    Or see Reset a Mac OS X 10.7 Lion Password and OS X Lion- Apple ID can be used to reset your user account password.
    Be sure to open Keychain Access and repair the keychain:
    Assuming that you are using a recent build of OS X, go to /Applications/Utilities and launch the app called Keychain Access. Go to the Window pulldown menu and select "Keychain First Aid". Enter your password, set the radio button to "Repair", and click "Start".

  • Dynamic Image issue using the SDK CrystalReportViewer in a Web Farm

    Hello,
    Well it's the classic dyanamic Red X image problem with a twist. We have the CrystalReportViewer control coded into an ASPX web page using the BOE XI R2 SDK.
    The problem is everything works fine (after all the usual Red X image fixes) when only one of the servers in the farm are running. It's when two are running, by using Process Monitor, I can tell NetScaler is splitting up the HTTP calls so one server may have the temp image created and of course the other one doesn't.
    Therefore, if you're lucky enough for one server to handle most of the load, image comes up fine. Otherwise, the report renders, but you get Red X for the image.
    I have seen an article about a registry key (CrystalImageDir) that allows you to enter a network share as the temp folder. The problem is, we are using Windows Integrated Authentication for the intranet site so you're faced the two hop authentication hurtle, leading to access denied on the UNC network path.
    Anyone using the SDK in a .NET application using multiple web front end servers?
    Thanks!
    Horus

    By the way, I'm hearing that NetScaler can handle sticky sessions. However, since a report with dynamic images is really a GET request for the report, then a bunch of sub-GETs to grab the images, what URL would you set the sticky session for?
    For example, if the web page containing the CrystalReportsViewer was:
    https://coolapplication.mycompany.com/Site100/ReportApp/ViewReport.aspx
    Then report the viewer would contain links to something like:
    https://coolapplication.mycompany.com/Site100/ReportApp/CrystalImageHandler.aspx?dynamicimage=cr_tmp_image_5671d67a-4f5d-4ab1-b3c8-0d2561ee64f3.png
    So which URL/page gets load balanced? Or is that not how LB works?
    Thanks!
    Horus

  • Setting Currency-rates with the SDK

    Hi all...
    Does anyone know how to set the currency-rates using the SDK (I have an online currency-rate source and wish via an addon to update all currency rates in SBO from this)

    Hello Ramsus,
    please you SBObob object for this purpose,
    <b>SetCurrencyRate Method</b>
    Sets the exchange rate for a specified date and currency in the company database
    Public Sub SetCurrencyRate( _
       ByVal Currency As String, _
       ByVal Date As Date, _
       ByVal Value As Double, _
       Optional ByVal Update As Boolean = False _
    <b>Parameters</b>
    Currency - Specifies the target currency
    Date - Specifies the date of the currency rate
    Value - Specifies the rate of the target currency
    Update - Specifies a value indicating whether or not to update the currency, if a value for the required date exists already
    you can see example in <u>Currency Bob Sample</u> in SDK documentation
    Regards, Avi

  • After I use the camera icon on the lock screen it doesn't requires password to use the iPhone, After I use the camera icon on the lock screen it doesn't requires password to use the iPhone

    After I use the camera icon on the lock screen it doesn't requires password to use the iPhone,

    You have the password requirement set to something other than "Immediate".
    Settings > General > Password Lock > Require Password

  • I recently bought a new macbook pro and set it up using the migration assistant and my mac mini.  I can't get the text message forwarding feature to work with both computers.

    I recently bought a new macbook pro and set it up using the migration assistant from my mac mini.  I can't get the text message forwarding feature to work with both computers.  It keeps saying that I only have 2 devices setup, my iPad and my macbook pro.  When I mess with the setting on my mac mini, it goes from saying that that is one of the devices to my macbook pro being the 2nd device.  I think that something happened as a result of my using the migration assistant and now it thinks that my macbook pro and my mac mini are one and the same computer.  Any ideas?

    Thanks, Sig.
    The old computer is a 2.6 Ghz Intel Core 2 Duo
    The new one is a 2.3 GHz intel core i7
    In going over this, thanks to "tallking it out" with you, I did discover the Text Edit problem.  Because I've still been unable to get the new computer text size (fonts or whatever) to match the old computer, I did not notice that the curser is now different--the line midway down the curser has to be placed on the line I am working upon, otherwise the edits go elsewhere on the page.  Now, with a bit of difficulty, I am able to get Text Edit to work correctly.
    If you have any ideas as to why my menu bar and Text Edit type are still so slow, I'd love to have them. 
    (I went through the process you suggested earlier, re my Trackpad preferences, and found no improvement.)

  • How do you remove the filename/path using the SDK

    I have a program that uses the Adobe Acrobat SDK . It creates aPDF file from a HTML file that gets created after the program cruches some data. It can create the PDF file fine but how do I get it to do it with out the file name and path in the lower left corner. We insert the created PDF file into another document and do not want to show the data on these created pages.
    Have searched through this site and can not see it mentioned.   HELP !!!

    I am not the programmer, he is out of the office today.
    What I see happen is that our program is used to create a database of the content of a multipage PDF file (an old doucment that has been scanned and OCR'd), the program then outputs the data as a HTML file (not the Adobe SDK).
    This HTML file is then converetd into a PDF file and attached to certain subsets of the original PDF file, its does a whole bunch of splitting and recombining of the document into the sections we need. It does this fine, no problems at all. All of this is done using our program and the Adobe SDK.
    The issue is that the PDF file (generally just one page) that gets created from the HTML file includes file name and file path at the lower left corner of the page. We are looking for the commands within the SDK that can turn the feature/function that creates this text on/off.
    As the Adobe Acrobat on this machine is used for many different jobs, some that require this text to be shown on other documents that are created (by using Acrobat itself and not the SDK) we really don't want to have to open Acrobat itself everytime we want to run this process.
    The SDK seems to have commands for pratically everything else, we were hoping it also has the commands within it that we can then program to not create this one area of text when converting the HTMl to PDF file from within our program..
    I hope that comes across OK
    PS
    I just ran a test creating a PDF file froma  webpage, and I can see the field Place Headers and Footers on a new page. I have tried creating the page with and without the Headers and Footers, that works fine. But can this be done just by using the SDK and if so where is that command located.
    Message was edited by: MichaelEastick

  • Trying to reset administrator password by using the Mac OS X Install disc to reset but it won't allow me to without original administrator password. Frustrating.

    Trying to reset administrator name/password by using the Mac OS X Install disc to reset but it won't allow me to without original administrator name/password. Frustrating. Reason I'm trying to reset is that it seems to be not recognising the administrator name as have changed password in System Preferences - Accounts.
    PowerMac, Mac OS X (10.5.8)

    Here's the instructions if you have the discs.
    *Mac OS X: Changing or resetting an account password*
    http://support.apple.com/kb/HT1274?viewlocale=en_US
    Changing your administrator password
    http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh655.html
    Here's one method to reset the password without the install disc:
    1. boot computer and hold the "apple" key and the "s" key.
    2. wait for terminal show
    3. release keys
    4. type without the quotes: "/sbin/mount -uaw"
    5. press enter
    6. type without the quotes: "rm /var/db/.applesetupdone
    7. press enter
    8. type without the quotes: "reboot"
    9. press enter
    This will let you create a new admin account when you reboot your computer.
    Also, without the discs, look at Mac OS X Tip - No Password, No Root, No CD? No Problem.
    http://www.macobserver.com/tip/2003/06/16.1.shtml
    Without the discs, try this (OS 10.5 only). *How to Reset User Password via single user mode*
    http://macosx.com/forums/howto-faqs/300019-howto-reset-user-password-via-single- user-mode.html
    Here is a way to get around not knowing the admin password on Macs.
    To reset your OS X password without an OS X CD you need to enter terminal and create a new admin account:
       1. Reboot
       2. Hold apple + s down after you hear the chime.
       3. When you get text prompt enter in these terminal commands to create a brand new admin account (hitting return after each line):
              * mount -uw /
              * rm /var/db/.AppleSetupDone
              * shutdown -h now
       4. After rebooting you should have a brand new admin account. When you login as the new admin you can simply delete the old one and you’re good to go again!
     Cheers, Tom

  • This message could not be delivered because your SMTP settings are not set. Please use the Accounts Preferences panel to set the SMTP options for your account.

    I am not able to send out an email. I keep getting the following message: This message could not be delivered because your SMTP settings are not set. Please use the Accounts Preferences panel to set the SMTP options for your account. Can someone help me with this?

    We need some information, starting with the email provider (eg. Google, Yahoo, Bellsouth, etc)

  • How to remove file attachments using the SDK

    I am looking for ways to programmatically remove file attachments from work items.  If I recall correctly, the system only keeps the file for as long as the relationship exists, so that, in theory, the file is deleted from the database a soon as the
    relationship is removed.
    I found this
    Using the SDK to Create and Edit Objects and Relationships Using Type Projections
    Is this the only way or are the other, simpler ways for deleting relationships and/or file attachments?
    Is this something I could do with the Orchestrator Remove Relationship activity?
    A little background on this question: I have multiple different teams with varying data retention requirements for Service Requests.  My longest requirement is 3 years (audit) while most teams only require 90 days.  I was looking to add in some
    jobs for some more aggressive file attachment grooming to keep the database smaller.
    Thanks.

    The relationship is defined as a membership/containment relationship. So, yes, if you delete the relationship, the file attachment (and the associated blob) are deleted as well.
    Based on the background you described, I'm assuming you identify a bunch of work orders whose files you want to delete if they're older than X. So, for instance "Work Items with Y team; delete file attachments older than 90 days", "Work Items
    with Q team; delete file attachments older than 3 years". Is that right?
    If so, you don't necessarily need to delete relationships specifically...you can simply delete the file attachment objects which will delete the relationship, the file attachment object, and the associated blob (the file itself in the database).
    Using the SDK, you will not need type projections for this. You'll only need the work item object(s) (an incident or service request or whatever), the GetRelatedObjects<>() method, and an IncrementalDiscoveryData object.
    So, after you get all of the appropriate work items, you can use the following snippet to delete their file attachments if the attachments meet your age requirements
    //Connect to the management group
    String strMySCSMServer = "<my mgmt server>";
    emg = new EnterpriseManagementGroup(strMySCSMServer);
    IncrementalDiscoveryData idd = new IncrementalDiscoveryData();
    ManagementPackRelationship relWorkItemHasFileAttachment = emg.EntityTypes.GetRelationshipClass(new Guid("AA8C26DC-3A12-5F88-D9C7-753E5A8A55B4")); //System.WorkItemHasFileAttachment
    //Get the work item's related file attachments using it's Id
    Guid myWorkItemGuid = new Guid("<some work item guid>");
    IList<EnterpriseManagementObject> lstFileAttachments = emg.EntityObjects.GetRelatedObjects<EnterpriseManagementObject>(myWorkItemGuid, relWorkItemHasFileAttachment, TraversalDepth.OneLevel, ObjectQueryOptions.Default);
    //Loop through each file attachment
    foreach (EnterpriseManagementObject emoFile in lstFileAttachments)
    //Determine its age
    DateTime AddedDate = (DateTime)emoFile[null, "AddedDate"].Value;
    TimeSpan FileAttachmentAge = AddedDate.Subtract(DateTime.Now);
    //Prep the file attachment for deletion if it's old enough, in this example, older than 90 days
    if (FileAttachmentAge.Days > 90)
    idd.Remove(emoFile);
    //Submit the deletions to the database.
    idd.Commit(emg);

  • How do I set up and use the TV tuner for an ENVY 23 TouchSmart​?

    How do I set up and use the TV tuner for an ENVY 23 TouchSmart?

    Hello LindaLamb:
    First thing is connect your coex TV Anti cable to your computer the end connector looks like a bolt. Then open up Windows Media Center go down the list to live tv and follow and fill in your information with wizard . If your computer doesn't have an built in TV Tunner then you will need to purchase an USB TV tunner. http://www.bing.com/shopping/search?q=usb+tv+tunne​r&qpvt=usb+tv+tunner&FORM=HURE . frrw

  • WRT54G....Can I set DHCP to use the router for DNS instead of external DNS?

    Hi folks. I cant' get my router to have DHCP tell my PCs that the router should be the DNS server instead of the external servers it is using. I am using Comcast Cable internet. It sets the external DNS servers for every PC that connects to it and I have problems finding my PCs on my network by NetBIOS name because the external DNS servers obviously don't store my local PCs. How can I set the router up to set DHCP to use the router for DNS?

    If you cannot set the DNS server in the configuration page for the DHCP server in your router then your router does not support this.
    This won't solve your problem though. The DNS server on the router is a simply forwarder. It simply forwards the DNS requests from your computer to the ISP's DNS servers. The DNS server does not accept dynamic updates to a private zone inside your LAN. And DNS is pretty much unrelated to the standard windows workgroup browsing which does the actual name resolution inside your LAN. That name resolution even works without a router inside your network. Basically all windows computers in your network periodically broadcast their name to the network. One windows computers is elected "master browser" which collects all these names and provides the name resolution service for all computers in the workgroup.
    If this does not work it is most likely a windows configuration problem. It could be a software firewall on the computers which blocks traffic. It could be that the computers are not setup for file/printer sharing and thus have the computer browser disabled. It could be that your computers have a WINS server configured which does not exist. There are probably more causes. The better source to ask this question would probably a Microsoft support group. They deal with these kinds of issues more often and maybe a MVP may be able to point you into the right direction or give some links to step-by-step instructions...

  • In Camera raw setting of CS6, using the adjustment brush, the new, add or erase buttons do not work. Please advise.

    In Camera raw setting of CS6, using the adjustment brush, the new, add or erase buttons do not work. Please advise.

    What operating system are you using?
    Which version of camera raw do you have in photoshop cs6?
    After you select the Adjustment Brush, the New button should already be enabled.
    Then after you draw on an area of the image, the Add button should be enabled, with the option to choose either of the other two buttons; New or Erase
    Could you post a screenshot?
    Maybe all the adjustment values are set to zero?
    (at least one needs to have a value other than zero)

  • HT1688 Is there any way to set password to protect the location service, to keep GPS open? so, the theft cannot turn it off so easy, because once the location service is turn off, all GPS track is useless...

    Is there any way to set password to protect the location service, to keep GPS open? so, the theft cannot turn it off so easy, because once the location service is turn off, all GPS track is useless...

    That is what Activation Lock of iOS 7 does
    In addition, it renders the iPhone totally useless to anyone who doesn't know your Apple ID and password.
    Allan

Maybe you are looking for

  • IPhoto 08 versus Canon DPP

    I own a Canon XSi DSLR and I shoot all my pics in RAW. I usually photograph birds and other wild life and often need to sharpen, adjust exposure, or modify the white balance. Does anyone have an opinion about which program, iPhoto 08 or Canon's DPP,

  • How can I make new tabs open on the right?

    I have the New Tabs On The End add-on but it doesn't work anymore since I upgraded to FF 6. Is there any way to force Firefox to due this without an add-on?

  • Aurora 7.0a2 crashes soon after opening

    My Aurora won't stay loaded today. It stays open for a few seconds, enough to start to read the page, which is an error page in response to the previous crash(es) of today, but then within about 10 seconds or less that crashes, too. I was able to ope

  • How do i delete photos from photo stream

    i have a slide show on my tv, but there are pictures that i don't want things that downloaded automatically on my phone that transfered into my photo stream. they were deleted off my phone, but are still on the stream. how do i delete these off photo

  • Smart sharpen filter in CS5 not working

    Hi, My smart sharpen filter is no longer working It seems to be doing it's job when I have a preview dialog box open, but as soon as I ok the changes the original image appears as if nothing happend. I've tried different files and it the same story: