Policy Server Guides › Policy Server Configuration Guide › Password Policies › Password Services Overview › Password Services Considerations

Password Services Considerations

When setting up Password Services, it is important that you consider the following:

• Time Differential Effect on Password Services on Multiple Policy Servers

  If you use Password Services with multiple Policy Servers, be sure the time settings on the Policy Server systems are synchronized, to prevent inadvertent disabling of user accounts or pre-mature forced password changes.

• Working With Directory Server Password Policies

  Directory Servers such as Netscape LDAP Directory Server allow you to create simple password policies which are evaluated by the directory before SiteMinder policies. If the Directory Server policies are more restrictive than SiteMinder policies, the Directory Server will accept or reject passwords without notifying SiteMinder. SiteMinder will not know that a user is attempting to login and will not provide any of the password management features.

Important! To use Password Policies, you must disable any Directory Server policies or make them less restrictive than the Password Policies.