Subject: LDAP Password Policy -- draft-behera-ldap-password-policy-10.txt
Author: SteveHB
Posted on: 02/16/2010 08:53:40 PM
http://tools.ietf.org/html/draft-behera-ldap-password-policy-10
Password policy as described in this document is a set of rules that
controls how passwords are used and administered in Lightweight
Directory Access Protocol (LDAP) based directories. In order to
improve the security of LDAP directories and make it difficult for
password cracking programs to break into directories, it is desirable
to enforce a set of rules on password usage. These rules are made to
ensure that users change their passwords periodically, passwords meet
construction requirements, the re-use of old password is restricted,
and to deter password guessing attacks.
The older version of Password Policy can be found as below:
http://tools.ietf.org/html/draft-vchu-ldap-pwd-policy-00
where Netscape LDAP Password Policy Controls PasswordExpiredControl(OID:2.16.840.1.113730.3.4.4), and PasswordExpiringControl(OID:2.16.840.1.113730.3.4.5) are specified.
Replies:
References:
