Class PasswordPolicyStateExtendedOperation


public final class PasswordPolicyStateExtendedOperation extends ExtendedOperationHandler<PasswordPolicyStateExtendedOperationHandlerCfg>
This class implements an LDAP extended operation that can be used to query and update elements of the Directory Server password policy state for a given user. The ASN.1 definition for the value of the extended request is:
 PasswordPolicyStateValue ::= SEQUENCE {
      targetUser     LDAPDN
      operations     SEQUENCE OF PasswordPolicyStateOperation OPTIONAL }

 PasswordPolicyStateOperation ::= SEQUENCE {
      opType       ENUMERATED {
           getPasswordPolicyDN                          (0),
           getAccountDisabledState                      (1),
           setAccountDisabledState                      (2),
           clearAccountDisabledState                    (3),
           getAccountExpirationTime                     (4),
           setAccountExpirationTime                     (5),
           clearAccountExpirationTime                   (6),
           getSecondsUntilAccountExpiration             (7),
           getPasswordChangedTime                       (8),
           setPasswordChangedTime                       (9),
           clearPasswordChangedTime                     (10),
           getPasswordExpirationWarnedTime              (11),
           setPasswordExpirationWarnedTime              (12),
           clearPasswordExpirationWarnedTime            (13),
           getSecondsUntilPasswordExpiration            (14),
           getSecondsUntilPasswordExpirationWarning     (15),
           getAuthenticationFailureTimes                (16),
           addAuthenticationFailureTime                 (17),
           setAuthenticationFailureTimes                (18),
           clearAuthenticationFailureTimes              (19),
           getSecondsUntilAuthenticationFailureUnlock   (20),
           getRemainingAuthenticationFailureCount       (21),
           getLastLoginTime                             (22),
           setLastLoginTime                             (23),
           clearLastLoginTime                           (24),
           getSecondsUntilIdleLockout                   (25),
           getPasswordResetState                        (26),
           setPasswordResetState                        (27),
           clearPasswordResetState                      (28),
           getSecondsUntilPasswordResetLockout          (29),
           getGraceLoginUseTimes                        (30),
           addGraceLoginUseTime                         (31),
           setGraceLoginUseTimes                        (32),
           clearGraceLoginUseTimes                      (33),
           getRemainingGraceLoginCount                  (34),
           getPasswordChangedByRequiredTime             (35),
           setPasswordChangedByRequiredTime             (36),
           clearPasswordChangedByRequiredTime           (37),
           getSecondsUntilRequiredChangeTime            (38),
           getPasswordHistory                           (39), --deprecated
           clearPasswordHistory                         (40),
           ... },
      opValues     SEQUENCE OF OCTET STRING OPTIONAL }
 

Both the request and response values use the same encoded form, and they both use the same OID of "1.3.6.1.4.1.26027.1.6.1". The response value will only include get* elements. If the request did not include any operations, then the response will include all get* elements; otherwise, the response will only include the get* elements that correspond to the state fields referenced in the request (regardless of whether that operation was included in a get*, set*, add*, remove*, or clear* operation).
  • Field Details

    • OP_GET_PASSWORD_POLICY_DN

      public static final int OP_GET_PASSWORD_POLICY_DN
      The enumerated value for the getPasswordPolicyDN operation.
      See Also:
    • OP_GET_ACCOUNT_DISABLED_STATE

      public static final int OP_GET_ACCOUNT_DISABLED_STATE
      The enumerated value for the getAccountDisabledState operation.
      See Also:
    • OP_SET_ACCOUNT_DISABLED_STATE

      public static final int OP_SET_ACCOUNT_DISABLED_STATE
      The enumerated value for the setAccountDisabledState operation.
      See Also:
    • OP_CLEAR_ACCOUNT_DISABLED_STATE

      public static final int OP_CLEAR_ACCOUNT_DISABLED_STATE
      The enumerated value for the clearAccountDisabledState operation.
      See Also:
    • OP_GET_ACCOUNT_EXPIRATION_TIME

      public static final int OP_GET_ACCOUNT_EXPIRATION_TIME
      The enumerated value for the getAccountExpirationTime operation.
      See Also:
    • OP_SET_ACCOUNT_EXPIRATION_TIME

      public static final int OP_SET_ACCOUNT_EXPIRATION_TIME
      The enumerated value for the setAccountExpirationTime operation.
      See Also:
    • OP_CLEAR_ACCOUNT_EXPIRATION_TIME

      public static final int OP_CLEAR_ACCOUNT_EXPIRATION_TIME
      The enumerated value for the clearAccountExpirationTime operation.
      See Also:
    • OP_GET_SECONDS_UNTIL_ACCOUNT_EXPIRATION

      public static final int OP_GET_SECONDS_UNTIL_ACCOUNT_EXPIRATION
      The enumerated value for the getSecondsUntilAccountExpiration operation.
      See Also:
    • OP_GET_PASSWORD_CHANGED_TIME

      public static final int OP_GET_PASSWORD_CHANGED_TIME
      The enumerated value for the getPasswordChangedTime operation.
      See Also:
    • OP_SET_PASSWORD_CHANGED_TIME

      public static final int OP_SET_PASSWORD_CHANGED_TIME
      The enumerated value for the setPasswordChangedTime operation.
      See Also:
    • OP_CLEAR_PASSWORD_CHANGED_TIME

      public static final int OP_CLEAR_PASSWORD_CHANGED_TIME
      The enumerated value for the clearPasswordChangedTime operation.
      See Also:
    • OP_GET_PASSWORD_EXPIRATION_WARNED_TIME

      public static final int OP_GET_PASSWORD_EXPIRATION_WARNED_TIME
      The enumerated value for the getPasswordExpirationWarnedTime operation.
      See Also:
    • OP_SET_PASSWORD_EXPIRATION_WARNED_TIME

      public static final int OP_SET_PASSWORD_EXPIRATION_WARNED_TIME
      The enumerated value for the setPasswordExpirationWarnedTime operation.
      See Also:
    • OP_CLEAR_PASSWORD_EXPIRATION_WARNED_TIME

      public static final int OP_CLEAR_PASSWORD_EXPIRATION_WARNED_TIME
      The enumerated value for the clearPasswordExpirationWarnedTime operation.
      See Also:
    • OP_GET_SECONDS_UNTIL_PASSWORD_EXPIRATION

      public static final int OP_GET_SECONDS_UNTIL_PASSWORD_EXPIRATION
      The enumerated value for the getSecondsUntilPasswordExpiration operation.
      See Also:
    • OP_GET_SECONDS_UNTIL_PASSWORD_EXPIRATION_WARNING

      public static final int OP_GET_SECONDS_UNTIL_PASSWORD_EXPIRATION_WARNING
      The enumerated value for the getSecondsUntilPasswordExpirationWarning operation.
      See Also:
    • OP_GET_AUTHENTICATION_FAILURE_TIMES

      public static final int OP_GET_AUTHENTICATION_FAILURE_TIMES
      The enumerated value for the getAuthenticationFailureTimes operation.
      See Also:
    • OP_ADD_AUTHENTICATION_FAILURE_TIME

      public static final int OP_ADD_AUTHENTICATION_FAILURE_TIME
      The enumerated value for the addAuthenticationFailureTime operation.
      See Also:
    • OP_SET_AUTHENTICATION_FAILURE_TIMES

      public static final int OP_SET_AUTHENTICATION_FAILURE_TIMES
      The enumerated value for the setAuthenticationFailureTimes operation.
      See Also:
    • OP_CLEAR_AUTHENTICATION_FAILURE_TIMES

      public static final int OP_CLEAR_AUTHENTICATION_FAILURE_TIMES
      The enumerated value for the clearAuthenticationFailureTimes operation.
      See Also:
    • OP_GET_SECONDS_UNTIL_AUTHENTICATION_FAILURE_UNLOCK

      public static final int OP_GET_SECONDS_UNTIL_AUTHENTICATION_FAILURE_UNLOCK
      The enumerated value for the getSecondsUntilAuthenticationFailureUnlock operation.
      See Also:
    • OP_GET_REMAINING_AUTHENTICATION_FAILURE_COUNT

      public static final int OP_GET_REMAINING_AUTHENTICATION_FAILURE_COUNT
      The enumerated value for the getRemainingAuthenticationFailureCount operation.
      See Also:
    • OP_GET_LAST_LOGIN_TIME

      public static final int OP_GET_LAST_LOGIN_TIME
      The enumerated value for the getLastLoginTime operation.
      See Also:
    • OP_SET_LAST_LOGIN_TIME

      public static final int OP_SET_LAST_LOGIN_TIME
      The enumerated value for the setLastLoginTime operation.
      See Also:
    • OP_CLEAR_LAST_LOGIN_TIME

      public static final int OP_CLEAR_LAST_LOGIN_TIME
      The enumerated value for the clearLastLoginTime operation.
      See Also:
    • OP_GET_SECONDS_UNTIL_IDLE_LOCKOUT

      public static final int OP_GET_SECONDS_UNTIL_IDLE_LOCKOUT
      The enumerated value for the getSecondsUntilIdleLockout operation.
      See Also:
    • OP_GET_PASSWORD_RESET_STATE

      public static final int OP_GET_PASSWORD_RESET_STATE
      The enumerated value for the getPasswordResetState operation.
      See Also:
    • OP_SET_PASSWORD_RESET_STATE

      public static final int OP_SET_PASSWORD_RESET_STATE
      The enumerated value for the setPasswordResetState operation.
      See Also:
    • OP_CLEAR_PASSWORD_RESET_STATE

      public static final int OP_CLEAR_PASSWORD_RESET_STATE
      The enumerated value for the clearPasswordResetState operation.
      See Also:
    • OP_GET_SECONDS_UNTIL_PASSWORD_RESET_LOCKOUT

      public static final int OP_GET_SECONDS_UNTIL_PASSWORD_RESET_LOCKOUT
      The enumerated value for the getSecondsUntilPasswordResetLockout operation.
      See Also:
    • OP_GET_GRACE_LOGIN_USE_TIMES

      public static final int OP_GET_GRACE_LOGIN_USE_TIMES
      The enumerated value for the getGraceLoginUseTimes operation.
      See Also:
    • OP_ADD_GRACE_LOGIN_USE_TIME

      public static final int OP_ADD_GRACE_LOGIN_USE_TIME
      The enumerated value for the addGraceLoginUseTime operation.
      See Also:
    • OP_SET_GRACE_LOGIN_USE_TIMES

      public static final int OP_SET_GRACE_LOGIN_USE_TIMES
      The enumerated value for the setGraceLoginUseTimes operation.
      See Also:
    • OP_CLEAR_GRACE_LOGIN_USE_TIMES

      public static final int OP_CLEAR_GRACE_LOGIN_USE_TIMES
      The enumerated value for the clearGraceLoginUseTimes operation.
      See Also:
    • OP_GET_REMAINING_GRACE_LOGIN_COUNT

      public static final int OP_GET_REMAINING_GRACE_LOGIN_COUNT
      The enumerated value for the getRemainingGraceLoginCount operation.
      See Also:
    • OP_GET_PASSWORD_CHANGED_BY_REQUIRED_TIME

      public static final int OP_GET_PASSWORD_CHANGED_BY_REQUIRED_TIME
      The enumerated value for the getPasswordChangedByRequiredTime operation.
      See Also:
    • OP_SET_PASSWORD_CHANGED_BY_REQUIRED_TIME

      public static final int OP_SET_PASSWORD_CHANGED_BY_REQUIRED_TIME
      The enumerated value for the setPasswordChangedByRequiredTime operation.
      See Also:
    • OP_CLEAR_PASSWORD_CHANGED_BY_REQUIRED_TIME

      public static final int OP_CLEAR_PASSWORD_CHANGED_BY_REQUIRED_TIME
      The enumerated value for the clearPasswordChangedByRequiredTime operation.
      See Also:
    • OP_GET_SECONDS_UNTIL_REQUIRED_CHANGE_TIME

      public static final int OP_GET_SECONDS_UNTIL_REQUIRED_CHANGE_TIME
      The enumerated value for the getSecondsUntilRequiredChangeTime operation.
      See Also:
    • OP_GET_PASSWORD_HISTORY

      @Deprecated public static final int OP_GET_PASSWORD_HISTORY
      Deprecated.
      The enumerated value for the getPasswordHistory operation. Now deprecated as it is insecure.
      See Also:
    • OP_CLEAR_PASSWORD_HISTORY

      public static final int OP_CLEAR_PASSWORD_HISTORY
      The enumerated value for the clearPasswordHistory operation.
      See Also:
  • Constructor Details

    • PasswordPolicyStateExtendedOperation

      public PasswordPolicyStateExtendedOperation()
      Create an instance of this password policy state extended operation. All initialization should be performed in the initializeExtendedOperationHandler method.
  • Method Details