SSPR User Discussions

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LDAP schema - extending schema necessary?

Sebastijan Sef Super User

over 3 years ago

Hi!

We have a customer who would like to implement SSPR against AD. But they do not want to extend schema.

Based on documentations it looks like LDAP schema extension is only needed for storing challenge-response information:

https://www.netiq.com/documentation/self-service-password-reset-45/sspr-install/data/b1l54no8.html#c41dire1y

https://www.netiq.com/documentation/self-service-password-reset-45/sspr-install/data/b1l5kpc7.html

But looking at schema file there are attributes that could mean schema extension is also needed for other stuff, like pwmEventLog, pwmLastPwdUpdate, pwmGUID and pwmData.

Since customer will use remote database for challenge-response storage, is LDAP schema extension still needed? Will SSPR work without it?

Kind regards,

Sebastijan

Kind regards,

Sebastijan

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Tags:

Schema

LDAP

SSPR

0 veridicis over 3 years ago

Hi Seb, take a look at this

support.microfocus.com/.../doc.php
Cancel
Vote Up 0 Vote Down

Cancel
0 Sebastijan Sef over 3 years ago in reply to veridicis

Thanks, so for example if I don't have pwmLastPwdUpdate attribute, last update timestamp will not be logged, or it will be logged into SQL?

Also I'm concerned regarding pwmData attribute, which was added in SSPR 4.5... This attribute is not mentioned in TID.

Kind regards,

Sebastijan

Kind regards,

Sebastijan

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button
Cancel
Vote Up 0 Vote Down

Cancel

Menu

SSPR User Discussions

LDAP schema - extending schema necessary?

Tags:

Resources