jwilleke Trusted Contributor.
Trusted Contributor.
379 views

Re: Report PasswordSync Status for a lot of Accounts

On 2012-08-08 19:56:02 +0000, thiele said:

> Hi,
> i need a solution to report the passwordsync status for a lot of users.
> iManager only can check it for one user!
> The possibility to use a ldap query to the attribut
> "DirXML-PasswordStatus" of the userobject is not usable!
>
> I found this :
> ....
> DirXML-PasswordSyncStatus does not reflect whether or not the password
>
> is in sync - it reflects whether or not the last password set/change
> operation successfully synchronized to the connected system as a means
>
> of providing real time feedback at the time of changing the password
> about the progress of propagating the password to all the connected
> systems. Unfortunately, the attribute was misappropriated in the
> UserApp
> UI to try to provide a current status view - something it was never
> meant to do. .....
>
>
>
> Regards Andy


You could also just use ldap and check.
The attribute:
DirXML-PasswordSyncStatus:
5065CFBA8D49FB4762BD5065CFBA8D4920120823094950355000000000001Code(-8017)
Operation vetoed by object creation policy.

That very long attribute breaks donw like:
GUID of the Driver:
5065CFBA8D49FB4762BD5065CFBA8D49

When this was set:
2012-08-23-09:49:50:355

Some sequence number I assume:
000000000001

The status will follow:


So an LDAP search with a filter of:
(DirXML-PasswordSyncStatus=5065CFBA8D49FB4762BD5065CFBA8D49*)

Will return all the users with some setting showing for the driver as
used in our example.

--

Thank You for your help!

-jim
Jim Willeke

Labels (1)
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.