PasswordModifyExtendedOperationHandlerConfiguration.xml revision 0e257bee0e980f6154794bac527df8101afecf18
<?xml version="1.0" encoding="UTF-8"?>
<!--
! CDDL HEADER START
!
! The contents of this file are subject to the terms of the
! Common Development and Distribution License, Version 1.0 only
! (the "License"). You may not use this file except in compliance
! with the License.
!
! You can obtain a copy of the license at
! See the License for the specific language governing permissions
! and limitations under the License.
!
! When distributing Covered Code, include this CDDL HEADER in each
! file and include the License file at
! trunk/opends/resource/legal-notices/OpenDS.LICENSE. If applicable,
! add the following below this CDDL HEADER, with the fields enclosed
! by brackets "[]" replaced with your own identifying information:
! Portions Copyright [yyyy] [name of copyright owner]
!
! CDDL HEADER END
!
!
! Portions Copyright 2007-2008 Sun Microsystems, Inc.
! -->
<adm:managed-object name="password-modify-extended-operation-handler"
plural-name="password-modify-extended-operation-handlers"
package="org.opends.server.admin.std"
extends="extended-operation-handler"
xmlns:adm="http://www.opends.org/admin"
xmlns:ldap="http://www.opends.org/admin-ldap">
<adm:synopsis>
The
<adm:user-friendly-name />
provides the ability for end users to change their own passwords, or
for administrators to reset user passwords.
</adm:synopsis>
<adm:description>
The password modify extended operation is defined in RFC 3062. It
includes the ability for users to provide their current password for
further confirmation of their identity when changing the password,
and it also includes the ability to generate a new password if the
user doesn't provide one.
</adm:description>
<adm:profile name="ldap">
<ldap:object-class>
<ldap:name>
ds-cfg-password-modify-extended-operation-handler
</ldap:name>
<ldap:superior>ds-cfg-extended-operation-handler</ldap:superior>
</ldap:object-class>
</adm:profile>
<adm:property-override name="java-class" advanced="true">
<adm:default-behavior>
<adm:defined>
<adm:value>
</adm:value>
</adm:defined>
</adm:default-behavior>
</adm:property-override>
<adm:property name="identity-mapper" mandatory="true">
<adm:synopsis>
Specifies the name of the identity mapper that should be used in
conjunction with the password modify extended operation.
</adm:synopsis>
<adm:description>
This property will be used to identify a user based on an
authorization ID in the 'u:' form. Changes to this property will
take effect immediately.
</adm:description>
<adm:syntax>
<adm:aggregation relation-name="identity-mapper"
parent-path="/">
<adm:constraint>
<adm:synopsis>
The referenced identity mapper must be enabled when the
<adm:user-friendly-name />
is enabled.
</adm:synopsis>
<adm:target-needs-enabling-condition>
<adm:contains property="enabled" value="true" />
</adm:target-needs-enabling-condition>
<adm:target-is-enabled-condition>
<adm:contains property="enabled" value="true" />
</adm:target-is-enabled-condition>
</adm:constraint>
</adm:aggregation>
</adm:syntax>
<adm:profile name="ldap">
<ldap:attribute>
<ldap:name>ds-cfg-identity-mapper</ldap:name>
</ldap:attribute>
</adm:profile>
</adm:property>
</adm:managed-object>