Previous Topic: Password Message Field Types

Next Topic: Policy Flags

Password Policy Behavior Flags

Sm_PasswordPolicyBehavior_t enumerates the behavioral characteristics of a password policy.

Password Policy Behavior Flag

Value

Sm_PasswordPolicy_DontTrackLogins

This flag has been replaced in SiteMinder v6.0 SP3 by:

  • Sm_PasswordPolicy_DontTrackSuccessLogins
  • Sm_PasswordPolicy_DontTrackFailedLogins

The new flags allow successful and failed logins to be tracked separately.

Sm_PasswordPolicy_DontTrackLogins is currently maintained for backwards compatibility. If this flag is set, login tracking for successful and failed logins will not occur.

0x00000004

Sm_PasswordPolicy_AllowFailedWrites

Allows users to log in even if password data cannot be written to the user directory.

0x00000008

Sm_PasswordPolicy_InactivityForcePWChange

Forces a password change on the next login attempt after a user's password becomes invalid due to inactivity.

0x00000010

Sm_PasswordPolicy_PWExpiredForcePWChange

Forces a password change on the next login attempt after a user's password expires.

0x00000020

Sm_PasswordPolicyBehavior_FullReenable

If a user's account is disabled due to successive incorrect password entries, this flag re-enables the account after a given time period. Specify the time in the nReenablement field of Sm_PolicyApi_PasswordPolicy_t.

If this flag is not set, the user is allowed another login attempt after the given nReenablement time period.

0x00000040

Sm_PasswordPolicy_StopPriorityChaining

Prevents the evaluation of password policies with lower priority ratings than the current password policy.

0x00000080

Sm_PasswordPolicy_ExpireDisablePassword

When the password expires, disable just the password and not the user account.

0x00000100

Sm_PasswordPolicy_FailuresDisablePassword

When the maximum number of authentication failures are exceeded, disable just the password and not the user account.

0x00000200

Sm_PasswordPolicy_ForceCase

Force the password's case that is specified through bit Sm_PasswordPolicy_CaseSelect.

0x00000400

Sm_PasswordPolicy_CaseSelect

If Sm_PasswordPolicy_ForceCase is set, Sm_PasswordPolicy_ForceCase forces upper case passwords when set, and forces lower case passwords when cleared.

0x00000800

Sm_PasswordPolicy_CaseBits

Sets both of the following bits (forces upper case passwords):

  • Sm_PasswordPolicy_ForceCase
  • Sm_PasswordPolicy_CaseSelect

0x00000c00

Sm_PasswordPolicy_StripLeadingWhiteSpace

Removes any leading white space from the password.

0x00001000

Sm_PasswordPolicy_StripTrailingWhiteSpace

Removes any trailing white space from the password.

0x00002000

Sm_PasswordPolicy_StripFlankingWhiteSpace

Sets both of the following bits (strips leading and trailing white space):

  • Sm_PasswordPolicy_StripLeadingWhiteSpace
  • Sm_PasswordPolicy_StripTrailingWhiteSpace

0x00003000

Sm_PasswordPolicy_StripEmbeddedWhiteSpace

Removes all white space within the password.

0x00004000

Sm_PasswordPolicy_WhiteSpaceBits

Sets all of the following bits (strips leading, trailing, and embedded white space):

  • Sm_PasswordPolicy_StripLeadingWhiteSpace
  • Sm_PasswordPolicy_StripTrailingWhiteSpace
  • Sm_PasswordPolicy_StripEmbeddedWhiteSpace

0x00007000

Sm_PasswordPolicy_PreProcessBits

Sets all of the following bits (forces upper case passwords and strips leading, trailing, and embedded white space):

  • Sm_PasswordPolicy_ForceCase
  • Sm_PasswordPolicy_CaseSelect
  • Sm_PasswordPolicy_StripLeadingWhiteSpace
  • Sm_PasswordPolicy_StripTrailingWhiteSpace
  • Sm_PasswordPolicy_StripEmbeddedWhiteSpace

0x00007c00

Sm_PasswordPolicy_DontTrackSuccessLogins

Performs directory updates at login time. When this flag is not set, the password policy tracks successful user logins, including the time of the last login.

0x00008000

Sm_PasswordPolicy_DontTrackFailedLogins

Performs directory updates at login time. When this flag is not set, the password policy tracks unsuccessful user login attempts.

0x00010000

Note: Values 0x00000400 through 0x00007c00 apply to password preprocessing. During preprocessing, the password is checked before it is processed or stored.


Copyright © 2010 CA. All rights reserved. Email CA about this topic