SSPR/CLE unable to dispaly AD Fine Grain Password Policies?

[jameswatson3]

Windows 2012
SSPR 3.3.1.2
CLE 3.9.1
Password Policy = LDAP
Directory = AD

I have been consistently unable to get either the SSPR HelpDesk module
or the CLE Password Policy link to _display_ password policy when it is
set by AD fine grained password settings objects. As far as I can tell,
the policy set by these objects is _enforced_, but it is never
_displayed_. So when you check the Password Policy tab in the Help Desk
module of SSPR it shows only the domain password policy not the user's
fine grained policy, and when you click the Password Policy link in CLE
it simply flashes and brings you back to the GINA (with the Password
Policy link now gone).

This would be really, really useful functionality to have working. Does
anyone have this successfully working?


--
jameswatson3
------------------------------------------------------------------------
jameswatson3's Profile: https://forums.netiq.com/member.php?userid=565
View this thread: https://forums.netiq.com/showthread.php?t=55600

[jameswatson3]

OK, so the availability of the SSPR Configurations is delivered by the
REST access ldap query. Just enabling the services does not do it.

However, now with everything else working, I still cannot get SSPR or
CLE to display the AD Fine Grained Policy objects. Anyone know if this
is a known issue or should be working?


--
jameswatson3
------------------------------------------------------------------------
jameswatson3's Profile: https://forums.netiq.com/member.php?userid=565
View this thread: https://forums.netiq.com/showthread.php?t=55600

[jameswatson3]

Sure is quiet in here. Man that makes me nervous.

I can open an incident on this if anyone knows that it should be
working.

Anyone?


--
jameswatson3
------------------------------------------------------------------------
jameswatson3's Profile: https://forums.netiq.com/member.php?userid=565
View this thread: https://forums.netiq.com/showthread.php?t=55600

[aburgemeister]

For an official response, of course, that's the way to go. I've never had
a customer using SSPR also use fine-grained password policies, so it's
possible that isn't something tested so far.


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...