Red Hat Directory Server 8.0 Configuration, Command, and File Reference

This is the directory a core file is generated in. The server user ID must have read and write
access to the directory, and no other user ID should have read or write access to it. The default
value for this attribute is the same directory containing the error log, which is usually
/var/log/dirsrv/slapd-instance_name.
Changes made to this attribute will not take effect until the server is restarted.
3.1.99. passwordChange (Password Change)
Indicates whether users may change their passwords.
For more information on password policies, see the "Managing Users and Passwords" chapter
in the Directory Server Administrator's Guide.
Parameter Description
Entry DN cn=config
Valid Values on | off
Default Value on
Syntax DirectoryString
Example passwordChange: on
3.1.100. passwordCheckSyntax (Check Password Syntax)
This attribute sets whether the password syntax is checked before the password is saved. The
password syntax checking mechanism checks that the password meets or exceeds the
password minimum length requirement and that the string does not contain any trivial words,
such as the user's name or user ID or any attribute value stored in the uid, cn, sn, givenName,
ou, or mail attributes of the user's directory entry.
Password syntax includes several different categories for checking:
• Minimum number of digit characters (0-9)
• Minimum number of ASCII alphabetic characters, both upper- and lower-case
• Minimum number of uppercase ASCII alphabetic characters
• Minimum number of lowercase ASCII alphabetic characters
• Minimum number of special ASCII characters, such as !@#$
• Minimum number of 8-bit characters
• Maximum number of times that the same character can be immediately repeated, such as
aaabbb
• Minimum number of character categories required per password; a category can be upper- or
lower-case letters, special characters, digits, or 8-bit characters
Chapter 2. Core Server Configuration Reference
62