To Change Default Password Policy Settings

You can change the default password policy by setting server properties with the dsconf command.

Before completing this procedure, read and complete the Worksheet for Defining Password Policy.

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. Translate the settings from your worksheet into dsconf command property settings.

2. Use the dsconf set-server-prop command to change default password policy properties appropriately.

   For example, the following command allows the Directory Manager to violate the default policy when modifying passwords:

   $ dsconf set-server-prop -h host -p port pwd-root-dn-bypass-enabled:on