pwdMustChange

- Password Must Change

Synopsis

( 1.3.6.1.4.1.42.2.27.8.1.13
 NAME 'pwdMustChange'
 DESC 'Password Must Change'
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
 X-DS-USE 'internal'
 X-ORIGIN 'Password Policy for LDAP Directories Internet Draft' )

Description

Specifies with a value of TRUE that users must change their passwords when they first bind to the directory after a password is set or reset by any other user, such as a password administrator, who has the access rights to modify the password.

If this attribute is not present, or if the value is FALSE users are not required to change their password upon binding after the password administrator sets or resets the password. This attribute is typically set by a password administrator after resetting a user's password.

When this attribute is set to TRUE, attempts to bind result in a DSA is unwilling to perform error (53), with additional information, Password was reset and must be changed.

SYNTAX

Boolean, single-valued.

Usage

Attribute specific to this Directory Server instance and version of the schema.

Examples

pwdMustChange: TRUE

Attributes

See attributes(5) for descriptions of the following attributes: