Human using a computer that is accessing a directory server.

Tivoli Directory Server is used to administer LDAP for different systems. It controls all the data in your LDAP directory including all the attributes, object classes and overall schema. Aside from this, you can also configure the global password policy associated with your entries. This global password policy is called pwdpolicy. It controls the policy of the attribute userPassword.

Other systems that work with TDS like Tivoli Access Manager (TAM) might also have their own mechanisms for password policies. In conjunction with those, enabling this password policy may help an organization in managing their passwords. However when using multiple password policies, administrators/developers must be careful on ensuring the resulting effective password policy is accurate to their requirements as different password policies may overlap and create unexpected results.

How to Configure TDS Global Password Policy

Step 1: Login to TDS Web Administration tool as a user with the proper privileges (e.g. cn=root).

Step 2: On the left hand pane, select Server administration.

Step 3: Select Manage password policies.

Step 4: Select pwdpolicy and click Edit.

Step 5: Select the attributes you wish to edit. Click Next when finished. The attribute ibm-pwdPolicy determines if the password policy is in effect or not. If you wish to enable this password policy, indicate “true” for this attribute and “false” if you would like to disable it.

Step 6: Proceed by providing the necessary information.

Step 7: Click Finish when done.

Configuring Tivoli Directory Server Password Policy

Services

Solutions

Pricing

Resources

Events

About Us

Get Started