pwd-chg-method
This options is used to override the automatically used low level LDAP operations for changing account passwords.
Syntax
pwd-chg-method = {automatic|mod_pwd_ext_op|del_add|del_then_add|replace}
Description
Overrides the automatically used low level LDAP operations for changing account passwords.
Options
- automatic
- The LDAP server type is detected and the appropriate LDAP password change operations are selected. This is the default behavior.
- mod_pwd_ext_op
- The ldap_extended_operation 1.3.6.1.4.1.4203.1.11.1 is used.
- del_add
- A single ldap_modify is used that has both a DELETE for the old password and an ADD for the new password.
- del_then_add
- Two ldap_modify invocations are used. The first does a DELETE for the old password. The second does an ADD for the new password.
- replace
- A single ldap_modify is used, which does a REPLACE of the password attribute with the new password.
Usage
This stanza entry is optional.
Default value
automatic
Example
pwd-chg-method = automatic