Verify Password Extended Operation Handler

Note: this component has a complexity level of "expert", which means that objects of this type are not expected to be created or altered. Please contact support for assistance if you believe that you have a need to create or modify this type of object.

The Verify Password Extended Operation Handler provides support for an extended operation that can be used to verify whether a provided password is correct for a given user without performing any other password policy processing for that user. It will not make any attempt to verify whether the target account is in a usable state, nor will it make any attempt to update its password policy state as a result of the verification attempt.

This extended operation may only be used by clients who have access control permission to issue the extended request (with an OID of "1.3.6.1.4.1.30221.2.6.72"), and who also have the permit-verify-password-request privilege.

Parent Component Properties dsconfig Usage

Parent Component

The Verify Password Extended Operation Handler component inherits from the Extended Operation Handler

Properties

The properties supported by this managed object are as follows:


Basic Properties: Advanced Properties:
 description  None
 enabled
 reject-insecure-requests

Basic Properties

description

Description
A description for this Extended Operation Handler
Default Value
None
Allowed Values
A string
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action

enabled

Description
Indicates whether the Extended Operation Handler is enabled (that is, whether the types of extended operations are allowed in the server).
Default Value
None
Allowed Values
true
false
Multi-Valued
No
Required
Yes
Admin Action Required
None. Modification requires no further action

reject-insecure-requests

Description
Indicates whether the server should reject attempts to use this extended operation over an insecure connection.
Default Value
true
Allowed Values
true
false
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action


dsconfig Usage

To list the configured Extended Operation Handlers:

dsconfig list-extended-operation-handlers
     [--property {propertyName}] ...

To view the configuration for an existing Extended Operation Handler:

dsconfig get-extended-operation-handler-prop
     --handler-name {name}
     [--tab-delimited]
     [--script-friendly]
     [--property {propertyName}] ...

To update the configuration for an existing Extended Operation Handler:

dsconfig set-extended-operation-handler-prop
     --handler-name {name}
     (--set|--add|--remove) {propertyName}:{propertyValue}
     [(--set|--add|--remove) {propertyName}:{propertyValue}] ...

To create a new Verify Password Extended Operation Handler:

dsconfig create-extended-operation-handler
     --handler-name {name}
     --type verify-password
     --set enabled:{propertyValue}
     [--set {propertyName}:{propertyValue}] ...

To delete an existing Extended Operation Handler:

dsconfig delete-extended-operation-handler
     --handler-name {name}