Previous Topic: set password-max-suspension Command

Next Topic: set password-min-age Command

set password-mimic-netscape-response-controls Command

The set password-mimic-netscape-response-controls command adds LDAP response controls about password expiry to bind and compare responses. This mimics the way that Netscape directories work with LDAP password response controls.

For more information about the controls that are added to the responses, see the Sun Java System LDAP SDK for C Programming Guide.

This command has the following format:

set password-mimic-netscape-response-controls = true | false;
true

Includes the following LDAP response controls in bind and compare responses:

The control with the OID 2.16.840.1.113730.3.4.4

(Or LDAP_CONTROL_PWEXPIRED, as defined in the ldap.h header file)

This control is added to bind and confirm responses after the password has expired.

The control with the OID 2.16.840.1.113730.3.4.5

(Or LDAP_CONTROL_PWEXPIRING, as defined in the ldap.h header file)

The value for this control is the number of seconds before the password expires. This value is supplied in the set password-age-warning-period Command.

false

(Default) No extra controls are added to bind and compare responses.

More information:

set password-age-warning-period Command

Notify Clients of Expiring and Expired Passwords

Password Commands Requiring an LDAP Client