Displaying Your Password Policy Configuration
When setting up your password policies, you should be aware of what is currently set before making changes. The following examples show how to display the current configuration information for the following:
The default password policy
The existing password validators
The SMTP handler for notifications
The example dsconfg commands provided in the examples assume the following:
• The commands are entered on the host where Windchill Directory Server resides (localhost is used).
• The Windchill Directory Server administrative port is 4444.
• The Windchill Directory Server bind DN is “cn=Manager” and the bind password is “admin”.
To view what is set for the default password policy, enter a command similar to the following:
dsconfig get-password-policy-prop --policy-name "Default Password Policy"
--hostname localhost --port 4444 --bindDN "cn=Manager"
--bindPassword "admin" --no-prompt --trustAll
To view the existing password validators, enter a command similar to the following:
dsconfig list-password-validators
--hostname localhost --port 4444 --bindDN "cn=Manager"
--bindPassword "admin" --no-prompt --trustAll
The output from the list-password-validators subcommand is similar to the following:
Password Validator : Type : enabled
------------------------------------:---------------------:--------
Attribute Value : attribute-value : true
Character Set : character-set : true
Dictionary : dictionary : false
Length-Based Password Validator : length-based : true
Repeated Characters : repeated-characters : true
Similarity-Based Password Validator : similarity-based : true
Unique Characters : unique-characters : true
You can use the information in the validator list to display the properties that are set for each validator. For example, use a command similar to the following to display the properties for the dictionary validator:
dsconfig get-password-validator-prop --validator-name Dictionary
--hostname localhost --port 4444 --bindDN "cn=Manager"
--bindPassword "admin" --no-prompt --trustAll
To display the configuration of the SMTP handler for notifications, enter a command similar to the following:
dsconfig list-properties -c account-status-notification-handler