Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: pass (athena.apache.org: local policy)
From: <Carlo.Accorsi@ibs-ag.com>
To: <users@directory.apache.org>
Date: Fri, 30 Sep 2011 18:23:13 +0200
Subject: [ApacheDS] looking for simple config for password policy
 enforcement.
Thread-Topic: [ApacheDS] looking for simple config for password policy
 enforcement.
Thread-Index: Acx/i8BeS54FQRI6R0+L5ro4+6T3bQ==
Message-ID: <2BE7E81B77921F43A6A273C2DF2FA6A43A426D8B03@IBSMBX.ibs-ag.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
acceptlanguage: en-US, de-DE
Content-Type: multipart/alternative;
	boundary="_000_2BE7E81B77921F43A6A273C2DF2FA6A43A426D8B03IBSMBXibsagco_"
MIME-Version: 1.0

--_000_2BE7E81B77921F43A6A273C2DF2FA6A43A426D8B03IBSMBXibsagco_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I would like to apply and enforce two different password policies to two di=
fferent sub trees (that share the same root).

I see where the policies (I think ) are supposed to go.
ou=3DpasswordPolicies,ads-interceptorId=3DauthenticationInterceptor,ou=3Din=
terceptors,ads-directoryServiceId=3Ddefault,ou=3Dconfig

The question is how does this policy then get linked or applied to a user?

In other directory servers, the pwdPolicy schema defines the policy object =
and all the supporting attributes (min/max pw length, etc).
Then the pwdPolicySubentry  attribute (on the user object) refers to the DN=
 of the policy object and this is how it's enforced.

I can't seem to make the connection in ApacheDS how this occurs?
I've tried creating  ads-passwordPolicy object at the subtree level of my u=
sers. Doesn't work.
I've tried creating a simple pwdPolicy object but it cannot be saved becaus=
e there's no structural objectclass associate with it.

Even if the functionality isn't fully implemented, I'd like to structure th=
e directory correctly. Your help is most appreciated.

--_000_2BE7E81B77921F43A6A273C2DF2FA6A43A426D8B03IBSMBXibsagco_--