Using IDS_NEW_PASSWORD_POLICY environment variable

Edit online

By default, IDS_NEW_PASSWORD_POLICY is enabled even when it is not explicitly set in ibmslapd.conf file, to use the new password policy behavior. When the password policy is enabled on the backend server and a user with the pwdreset attribute value set to true attempts to bind through proxy or perform a userpassword compare operation through proxy or backend, the response differs from when the same user attempts to bind operation directly to the backend server. The backend server is enhanced to send same response types for both and userpassword compare operations. This behavior can be controlled with IDS_NEW_PASSWORD_POLICY environment variable. From version 11.0.1 onwards, set this variable explicitly in ibmslapd.conf to enable the new password policy response behavior.

Table 1. IDS_NEW_PASSWORD_POLICY values
Value	Behavior	Description
Yes	New policy	Enables the new password policy behavior.
No	Legacy policy	Uses the legacy password policy behavior.
Not set	New policy	Uses the new password policy by default.
Invalid value	New policy	Uses the new password policy for any invalid value.

You can set the IDS_NEW_PASSWORD_POLICY environment variable by using one of the following approaches:

Using the LDAP client utility (recommended)

Run ldapmodify command by using the ldif file:
idsldapmodify -p <port> -D <adminDN> -w <adminPW> -i configupdate.ldif

where configupdate.ldif contains the following lines:
```
dn: cn=Front End, cn=configuration
changetype: modify
add: ibm-slapdSetEnv
ibm-slapdSetEnv: IDS_NEW_PASSWORD_POLICY=YES
 
```
Restart the directory server instance

Using the environment variable to set in shell

Set the environment variable IDS_NEW_PASSWORD_POLICY.
On AIX and Linux systems (ksh shell):

export IDS_NEW_PASSWORD_POLICY=YES

On Windows systems:

set IDS_NEW_PASSWORD_POLICY=YES
For the set value of the environment variable to be effective, restart the directory server instance from the same shell where the environment variable is set.