AttributeValuePasswordValidatorConfiguration.xml revision 20247dd12aa0db33627fdeb398385dd27eb26c2e
<?xml version="1.0" encoding="UTF-8"?>
<!--
! CDDL HEADER START
!
! The contents of this file are subject to the terms of the
! Common Development and Distribution License, Version 1.0 only
! (the "License"). You may not use this file except in compliance
! with the License.
!
! You can obtain a copy of the license at
! See the License for the specific language governing permissions
! and limitations under the License.
!
! When distributing Covered Code, include this CDDL HEADER in each
! file and include the License file at
! trunk/opends/resource/legal-notices/OpenDS.LICENSE. If applicable,
! add the following below this CDDL HEADER, with the fields enclosed
! by brackets "[]" replaced with your own identifying information:
! Portions Copyright [yyyy] [name of copyright owner]
!
! CDDL HEADER END
!
!
! Portions Copyright 2007 Sun Microsystems, Inc.
! -->
<adm:managed-object name="attribute-value-password-validator"
plural-name="attribute-value-password-validators"
package="org.opends.server.admin.std" extends="password-validator"
xmlns:adm="http://www.opends.org/admin"
xmlns:ldap="http://www.opends.org/admin-ldap">
<adm:synopsis>
The
<adm:user-friendly-name />
is used to determine whether a proposed password is acceptable based on
whether the given password value appears the user's entry.
</adm:synopsis>
<adm:profile name="ldap">
<ldap:object-class>
<ldap:oid>1.3.6.1.4.1.26027.1.2.96</ldap:oid>
<ldap:name>ds-cfg-attribute-value-password-validator</ldap:name>
<ldap:superior>ds-cfg-password-validator</ldap:superior>
</ldap:object-class>
</adm:profile>
<adm:property name="match-attribute" mandatory="false" multi-valued="true">
<adm:synopsis>
Specifies the name(s) of the attribute(s) whose values should be checked
to determine whether they match the provided password. If this is not
provided, then all attributes in the user's entry will be checked.
</adm:synopsis>
<adm:default-behavior>
<adm:alias>
<adm:synopsis>
All attributes in the user entry will be checked.
</adm:synopsis>
</adm:alias>
</adm:default-behavior>
<adm:syntax>
<adm:attribute-type />
</adm:syntax>
<adm:profile name="ldap">
<ldap:attribute>
<ldap:oid>1.3.6.1.4.1.26027.1.1.146</ldap:oid>
<ldap:name>ds-cfg-match-attribute</ldap:name>
</ldap:attribute>
</adm:profile>
</adm:property>
<adm:property name="test-reversed-password" mandatory="true">
<adm:synopsis>
Indicates whether this password validator should test the reversed value
of the provided password as well as the order in which it was given.
</adm:synopsis>
<adm:syntax>
<adm:boolean />
</adm:syntax>
<adm:profile name="ldap">
<ldap:attribute>
<ldap:oid>1.3.6.1.4.1.26027.1.1.337</ldap:oid>
<ldap:name>ds-cfg-test-reversed-password</ldap:name>
</ldap:attribute>
</adm:profile>
</adm:property>
</adm:managed-object>