Anonymous_User Absent Member.
Absent Member.
288 views

nsimPasswordReminder

Hi, we had some auditors do a ldap scan of our environment and we noticed that the nsimPasswordReminder attribute is visible to all users. Is this normal and can we change this? We currently do use Password hints for forget password.

Thank-you
Labels (1)
0 Likes
2 Replies
hendersj Acclaimed Contributor.
Acclaimed Contributor.

Re: nsimPasswordReminder

On Fri, 01 Jun 2012 14:36:50 +0000, Novell GroupWise wrote:

> Hi, we had some auditors do a ldap scan of our environment and we
> noticed that the nsimPasswordReminder attribute is visible to all users.
> Is this normal and can we change this? We currently do use Password
> hints for forget password.


As I recall, this is normal - otherwise, the password hint cannot be
shown to a not-logged-in user (ie, it has to be readable by [Public]).

Jim



--
Jim Henderson, CNA6, CDE, CNI, LPIC-1, CLA10, CLP10
Novell Knowledge Partner
0 Likes
Knowledge Partner
Knowledge Partner

Re: nsimPasswordReminder

On Fri, 01 Jun 2012 14:36:50 +0000, Novell GroupWise wrote:

> Hi, we had some auditors do a ldap scan of our environment and we
> noticed that the nsimPasswordReminder attribute is visible to all users.


I suspect it would have to be, otherwise an unauthenticated user who has
forgotten their password would not be able to retrieve the hint.


> Is this normal and can we change this? We currently do use Password
> hints for forget password.


Normal, yes, I suspect so. Can you change it? Sure. But I doubt that's
going to be a good idea if you're using it.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.novell.com

Please post questions in the forums. No support provided via email.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.