Man working at a computer with a cybersecurity lock as an overlay.

Tivoli Directory Server (TDS) is used to manage LDAP attributes for different systems. Among these services provided by TDS is password management. By default, Tivoli Directory Server has a global password policy which is called pwdpolicy. It controls the policy of the attributeuserPassword. However, some systems require additional password policies to manage certain groups/individuals in their organization. On default this is not enabled in TDS. The TDS password policy is disabled for group and individual specific policies. These must be configured in the TDS server to be used.

How to Enable Tivoli Directory Server Group and Individual Password Policies

Step 1: Login to the Tivoli Directory Server server command line as root.

Step 2: Run the following command:

For Non-SSL Configurations

idsldapmodify -D <adminDN> -w <adminPW> -h <hostname> -k
dn: cn=pwdpolicy,cn=ibmPolicies
ibm-pwdpolicy:true
ibm-pwdGroupAndIndividualEnabled:true

For SSL Configurations

idsldapmodify -D <adminDN> -w <adminPW> -h <hostname> -Z -K <keystore database location> -k
dn: cn=pwdpolicy,cn=ibmPolicies
ibm-pwdpolicy:true
ibm-pwdGroupAndIndividualEnabled:true

Enabling TDS Password Policy for Groups and Individuals

Services

Solutions

Pricing

Resources

Events

About Us

Get Started