eDirectory Idea Exchange

Welcome to NetIQ eDirectory Idea Exchange

This idea exchange is for submitting product enhancement ideas only. If you have a question about the product, please click on the “Discussions” tab above and post your questions there.

2022-04-26

Idea ID: 2873116

Identity Console with default Tree-Name

by tschloesser in NetIQ eDirectory

3 votes

Labels: Identity Console

Status: New Idea
- New Idea on 2022-4-26
- 0 Comments
Hi, I guess it would be great to have the option to define a default Tree-Name for the login dialog. Offering this capability, an additional option to "hide" the Tree-Name field like in iManager would be great as well. Kind regards Thorsten...
- Ideas Id :
2022-04-26

Idea ID: 2873115

Identity Console Contextless Login

by tschloesser in NetIQ eDirectory

5 votes

Labels: Identity Console

Status: New Idea
- New Idea on 2022-4-26
- 0 Comments
Hi, I see IC getting better and maybe even close to replace iManager (is some use cases), but I am missing an LDAP contextless login capability when using the LDAP mode. I guess it is not really convenient to enter an LDAP-DN every time to login...
- Ideas Id :
2022-02-21

Idea ID: 2872562

Extend NMAS Password Policy

by tschloesser in NetIQ eDirectory

2 votes

Labels: Configuration , Other

Status: New Idea
- New Idea on 2022-2-21
- 0 Comments
It would be great to have the option to define alternative rules in one password policy for a user. LAst week the CSO of our customer asked me to re-configure the password policy to: - force letters nad Numbers or -force letters and special characters...
- Ideas Id :
2022-02-15

Idea ID: 2872518

function storing attribute data using deflate or gzip compression to overcome OctedString size limitations

by kgast in NetIQ eDirectory

2 votes

Labels: Other

Status: New Idea
- New Idea on 2022-2-15
- 0 Comments
This could prevent schema changes or LDAP attribute mapping in case of breaking the size limitation for attribute data (OctedString). Many services store XML configuration data nowadays in attributes which can very well be compressed
- Ideas Id :
2022-02-10

Idea ID: 2872475

iManager/Identy Console: "Mobile" on general -> identification tab in the user view

by SaintHuck in NetIQ eDirectory

1 votes

Labels: Identity Console

Status: New Idea
- New Idea on 2022-2-10
- 0 Comments
The atribute "mobile" should be available in the user view unter General -> Identification in all available administration tools (iManager/Identity Console). Why: a mobile number has to be added quite often and the way about "Others" is complicated...
- Ideas Id :
2022-01-31

Idea ID: 2872350

PBKDF2 iteration count

by alekz in NetIQ eDirectory

1 votes

Labels: Other

Status: New Idea
- New Idea on 2022-1-31
- 1 Comment
According to the documentation, by default the iteration count is set to 1. That seems quite low. When the standard was written the minimum was 1000: https://datatracker.ietf.org/doc/html/rfc2898#section-4.2 According to OWASP the recommended iteration...
- Ideas Id :
2021-11-17

Idea ID: 2871824

ndsbackup for eDirectory for Windows

by mjuricek in NetIQ eDirectory

6 votes

Labels: Configuration , Other , Supported Platforms

Status: New Idea
- New Idea on 2021-11-17
- 0 Comments
Backups are essential! And setting a backup of eDir at our customers should be one of the first things which should be implemented. eDirectory running on Linux servers allows us several possibilities who to provide a backup. Each option has some advantages...
- Ideas Id :
2021-07-09

Idea ID: 2870423

Indexing - candidate monitoring and alerting

by issaqua in NetIQ eDirectory

1 votes

Labels: Configuration , Installation-Deployment

Status: New Idea
- New Idea on 2021-7-9
- 0 Comments
Hi guys, It could be very helpful to have a report that runs periodically (once per week?) that notifies customers of fields that could/should be indexed. This could prevent performance and (in extreme cases) availability issues. It would be even nicer...
- Ideas Id :
2021-03-16

Idea ID: 2863103

Password Policy check against HaveIBeenPwned

by Ken Etter in NetIQ eDirectory

3 votes

Labels: Configuration

Status: New Idea
- New Idea on 2021-3-16
- 5 Comments
It would be very helpful if the Password Policy could be checked for breached or pwned passwords. The most obvious choice would be to use Troy Hunt's Have I Been Pwned service. It would be great if it could verify individual users password choice when...
- Ideas Id :
2020-10-21

Idea ID: 2834496

No Intruder Lock Out Duration - Set duration to minutes, not just hours

by raechell26 in NetIQ eDirectory

4 votes

Labels: Other

Status: New Idea
- New Idea on 2020-10-21
- 0 Comments
Screen Shot 2020-10-16 at 2.22.07 PM.png We would like to request an enhancement to the "No Intruder Lock Out Duration" feature. Can it be made so, you can choose a duration of some minutes, rather than just hours? The lowest duration period you can...
- Ideas Id :
2020-09-04

Idea ID: 2824371

Virtual attributes

by rivey in NetIQ eDirectory

1 votes

Labels: Configuration

Status: New Idea
- New Idea on 2020-9-4
- 0 Comments
It would be nice to have attributes that follow other attributes to mirror additional attributes. For example, manager is a DN. I'd like to be able to configure other attributes, such as managertelephone, manageremail, managerfullname, etc. These attributes...
- Ideas Id :
2020-08-26

Idea ID: 2820562

JSON Attribute Type

by rivey in NetIQ eDirectory

1 votes

Status: New Idea
- New Idea on 2020-8-26
- 1 Comment
JSON is a more popular data type and is easily serialized. I find that we are constantly adding schema to support taking all of the attributes to describe whatever data we are integrating onto appropriate objects, whether they are custom objects or existing...
- Ideas Id :
2020-08-26

Idea ID: 2820561

Config Delta

by rivey in NetIQ eDirectory

1 votes

Labels: Configuration

Status: New Idea
- New Idea on 2020-8-26
- 0 Comments
Have a configuration utility that allows the comparison between edirectory servers to compare configurations. Essentially, we will have various environments with different settings and sometimes we skip a step or forget to update the build documentation...
- Ideas Id :
2020-06-29

Idea ID: 2808504

instrument eDirectory for Prometheus

by klasen in NetIQ eDirectory

8 votes

Labels: Integrations , Dashboard-Visualization

Status: New Idea
- New Idea on 2020-6-29
- 0 Comments
Prometheus is an open-source systems monitoring and alerting toolkit. Prometheus scrapes metrics from instrumented jobs, either directly or via an intermediary push gateway for short-lived jobs. It stores all scraped samples locally and runs rules over...
- Ideas Id :
2020-06-22

Idea ID: 2806840

eDirAPI not working when Anonymous Simple Bind is disabled

by bandries in NetIQ eDirectory

3 votes

Labels: Containers

Status: Accepted
- Accepted on 2020-6-22
- 3 Comments
Make it possible to connect to an eDirectory server that doesn't allow anonymous LDAP Bind.
- Ideas Id :
2020-05-25

Idea ID: 2800207

Add more LDAP fields to CEF logging

by bandries in NetIQ eDirectory

4 votes

Labels: Other

Status: New Idea
- New Idea on 2020-5-25
- 1 Comment
LDAP_CONNECTION: Server port number / Secure Connection / Start TLS LDAP_BIND: Anonymous / Unauthenticated / Authenticated BIND LDAP_BIND: Response Time LDAP_SEARCH: Search Event Data (AND filter AND attributes AND extended operation, not OR) LDAP_SEARCH_RESPONSE...
- Ideas Id :
2020-02-24

Idea ID: 2786855

Log name of driver as modifier/initiator instead of server name

by alekz in NetIQ eDirectory

5 votes

Labels: Other

Status: Waiting for Votes
- Waiting for Votes on 2020-2-24
- 0 Comments
When a driver modifies attributes and objects, the server name is seen as the initiator in e.g. Sentinel. When you have more than 1 driver this makes it impossible to know which driver made what change and makes troubleshooting dependent on IDM driver...
- Ideas Id :
2020-02-14

Idea ID: 2786794

update universal password policy to support latest NIST guidelines

by John_Walker in NetIQ eDirectory

3 votes

Labels: Configuration

Status: Waiting for Votes
- Waiting for Votes on 2020-2-14
- 0 Comments
https://pages.nist.gov/800-63-3/sp800-63b.html Current behavior - password expires when admin resets only works if "Number of days before password expires" is enabled. Proposed behavior - password expires when admin resets without configuring a password...
- Ideas Id :
2020-01-09

Idea ID: 2786591

Add Official Support for Root Install/Non-Root Instance

by Matt Weisberg in NetIQ eDirectory

10 votes

Labels: Installation-Deployment

Status: Accepted
- Accepted on 2020-1-9
- 1 Comment
Currently, the only SUPPORTED method to running eDirectory as a non-root user is to use the tarball based install. The problem with this is that it leaves the eDirectory binaries vulnerable, as the non-root/non-privileged user owns the binaries. In addition...
- Ideas Id :
2019-11-27

Idea ID: 2786405

Add OAuth login method for eDirectory

by tomerazran in NetIQ eDirectory

1 votes

Labels: Integrations

Status: Waiting for Votes
- Waiting for Votes on 2019-11-27
- 0 Comments
We have some APIs that uses eDirectory as their database. We want to restrict the API access to eDirectory, by using the logged in user credentials, and only allow the user security context. It is possible to do that using NMAS login method, for example...
- Ideas Id :