Password policy bind initialize and verify extended operation

Edit online

The password policy bind-initialize and verify extended operation explains its use with the server and provides the results.

Description
This extended operation runs password policy bind initialization and verification for a specified user. This extended operation checks to see whether an account is locked. The extended operation provides a mechanism for the proxy server to support bind plug-ins.
Request
OID
1.3.18.0.2.12.79
Syntax
requestValue ::= SEQUENCE {targetDN DirectoryString}
Response
OID
1.3.18.0.2.12.79
Syntax
responseValue ::= SEQUENCE {ReturnCode Integer}
Behavior
This extended operation runs prebind processing that is related to password policy, that is, bind initialization and verification for a specified user. This extended operation also checks whether an account is locked. The extended operation provides a mechanism for the proxy server to support bind plug-ins. This extended operation can be enabled or disabled by setting the ibm-slapdEnableRemotePWPExOps attribute in the configuration file to TRUE or FALSE in the following entry: 
“cn=Directory, cn=RDBM Backends, cn=IBM Directory, cn=Schemas, cn=Configuration”
The following persons are enabled to call this extended operation:
  • Primary Directory Administrator
  • Local Administration Group members with DirDataAdmin role
  • Global administration group members
Note: If this extended operation is called by a user who does not have enough access, LDAP_INSUFFICIENT_ACCESS is returned.
This extended operation has the following possible return codes:
  • LDAP_SUCCESS - The operation is completed successfully, caller must check the return code in the result value.
  • LDAP_OPERATIONS_ERROR - The operation did not complete successfully because of an internal server error. There is not any result value.
  • LDAP_INSUFFICIENT_ACCESS - The operation did not complete because the requestor does not have permission to run the operation. There is not any result value.
  • LDAP_UNWILLING_TO_PERFORM - The user account is locked.
  • LDAP_INVALID_CREDENTIALS - Invalid DN or password.
  • LDAP_NO_MEMORY

This extended operation is not supported by the Administration Server.

Scope
This extended operation affects only the current operation.
Auditing
The additional information in the audit log for this extended operation is listed. The target DN is audited in the following format: 
targetDN: DN value