System information

Option Description
filter searches from the root.
length Specifies the exact number a PIN must
contain; the default is 6. Do not use with
minlength or maxlength.
minlength Sets the minimum length of the generated
PINs. If used with maxlength, this sets the
lower end of the range of the PIN length. Do
not use with length.
maxlength Sets the maximum length of the generated
PINs. If used with minlength, this sets the
upper end of the range of the PIN length. Do
not use with length.
gen Specifies the character type for PINs. The
characters in the password can be
constructed out of alphabetic characters
(RNG-alpha), alphanumeric characters
(RNG-alphanum), or any printable ASCII
characters (printableascii).
case Restricts the character cases to uppercase
only; otherwise, the case is mixed. Restricting
alphabetic characters to uppercase reduces
the overall combinations for the password
space significantly. Use case with gen.
hash Specifies the message digest algorithm with
which to hash the PINs before storing them in
the authentication directory. If SHA-1 or MD5
is used, set an output file for storing PINs in
plain text. A user needs the PINs in plain text
for delivering them to end entities. The default
is sha1, which produces a 160-bit message
digest. md5 produces a 128-bit message
digest. none does not hash the PINs.
saltattribute Specifies the LDAP attribute to use for salt
creation. If an attribute is set, the tool
integrates the value of the attribute with each
PIN and hashes the resulting string with the
hash routine. The default is to use the entry
DN. For details, refer to Section 2.3, “How
PINs Are Stored in the Directory”.
input Specifies the file that contains the list of DNs
to process. If this is used, the tool compares
the filtered DNs to the ones in the input file
Syntax
23