org.apache.directory.server.config.beans

Class PasswordPolicyBean

java.lang.Object

org.apache.directory.server.config.beans.AdsBaseBean

org.apache.directory.server.config.beans.PasswordPolicyBean

public class PasswordPolicyBean
extends AdsBaseBean

A simple pojo holding the password policy configuration base on this draft.

Field Summary

Fields

Modifier and Type	Field and Description
private boolean	pwdAllowUserChange indicates whether users can change their own passwords.
private java.lang.String	pwdAttribute the name of the attribute to which the password policy is applied.
private int	pwdCheckQuality indicates how the password quality will be verified while being modified or added.
private int	pwdExpireWarning the maximum number of seconds before a password is due to expire that expiration warning messages will be returned to an authenticating user.
private int	pwdFailureCountInterval the number of seconds after which the password failures are purged from the failure counter.
private int	pwdGraceAuthNLimit the number of times an expired password can be used to authenticate.
private int	pwdGraceExpire specifies the number of seconds the grace authentications are valid Default value is 0, no limit.
private java.lang.String	pwdId The PasswordPolicy unique identifier
private int	pwdInHistory specifies the maximum number of used passwords stored in the pwdHistory attribute.
private boolean	pwdLockout flag to indicate if the account needs to be locked after a specified number of consecutive failed bind attempts.
private int	pwdLockoutDuration the number of seconds that the password cannot be used to authenticate due to too many failed bind attempts.
private int	pwdMaxAge holds the number of seconds after which a modified password will expire.
private int	pwdMaxDelay the maximum number of seconds to delay when responding to a failed authentication attempt.
private int	pwdMaxFailure the number of consecutive failed bind attempts after which the password may not be used to authenticate.
private int	pwdMaxIdle the number of seconds an account may remain unused before it becomes locked Default value is 0, no check for idle time.
private int	pwdMaxLength this attribute holds the maximum number of characters that may be used in a password.
private int	pwdMinAge holds the number of seconds that must elapse between modifications to the password.
private int	pwdMinDelay the number of seconds to delay responding to the first failed authentication attempt Default value 0, no delay.
private int	pwdMinLength this attribute holds the minimum number of characters that must be used in a password.
private boolean	pwdMustChange flag to indicate if the password must be changed by the user after they bind to the directory after a password is set or reset by a password administrator.
private boolean	pwdSafeModify flag to specify whether or not the existing password must be sent along with the new password when being changed.
private java.lang.String	pwdValidator the FQCN of the password validator

Constructor Summary

Constructors

Constructor and Description
PasswordPolicyBean()

Method Summary

Modifier and Type	Method and Description
java.lang.String	getPwdAttribute()
int	getPwdCheckQuality()
int	getPwdExpireWarning()
int	getPwdFailureCountInterval()
int	getPwdGraceAuthNLimit()
int	getPwdGraceExpire()
java.lang.String	getPwdId()
int	getPwdInHistory()
int	getPwdLockoutDuration()
int	getPwdMaxAge()
int	getPwdMaxDelay()
int	getPwdMaxFailure()
int	getPwdMaxIdle()
int	getPwdMaxLength()
int	getPwdMinAge()
int	getPwdMinDelay()
int	getPwdMinLength()
java.lang.String	getPwdValidator()
boolean	isPwdAllowUserChange()
boolean	isPwdLockout()
boolean	isPwdMustChange()
boolean	isPwdSafeModify()
void	setPwdAllowUserChange(boolean pwdAllowUserChange)
void	setPwdAttribute(java.lang.String pwdAttribute)
void	setPwdCheckQuality(int pwdCheckQuality)
void	setPwdExpireWarning(int pwdExpireWarning)
void	setPwdFailureCountInterval(int pwdFailureCountInterval)
void	setPwdGraceAuthNLimit(int pwdGraceAuthNLimit)
void	setPwdGraceExpire(int pwdGraceExpire)
void	setPwdId(java.lang.String pwdId)
void	setPwdInHistory(int pwdInHistory)
void	setPwdLockout(boolean pwdLockout)
void	setPwdLockoutDuration(int pwdLockoutDuration)
void	setPwdMaxAge(int pwdMaxAge)
void	setPwdMaxDelay(int pwdMaxDelay)
void	setPwdMaxFailure(int pwdMaxFailure)
void	setPwdMaxIdle(int pwdMaxIdle)
void	setPwdMaxLength(int pwdMaxLength)
void	setPwdMinAge(int pwdMinAge)
void	setPwdMinDelay(int pwdMinDelay)
void	setPwdMinLength(int pwdMinLength)
void	setPwdMustChange(boolean pwdMustChange)
void	setPwdSafeModify(boolean pwdSafeModify)
void	setPwdValidator(java.lang.String pwdValidator) Sets the password validator
java.lang.String	toString()
java.lang.String	toString(java.lang.String tabs)

Methods inherited from class org.apache.directory.server.config.beans.AdsBaseBean

getDescription, getDn, isDisabled, isEnabled, setDescription, setDn, setEnabled, toString, toString, toString, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

pwdId

@ConfigurationElement(attributeType="ads-pwdId",
                      isRdn=true)
private java.lang.String pwdId

The PasswordPolicy unique identifier

pwdAttribute

@ConfigurationElement(attributeType="ads-pwdAttribute")
private java.lang.String pwdAttribute

the name of the attribute to which the password policy is applied. Currently only "userPassword" attribute is supported

pwdMinAge

@ConfigurationElement(attributeType="ads-pwdMinAge",
                      isOptional=true,
                      defaultValue="0")
private int pwdMinAge

holds the number of seconds that must elapse between modifications to the password. Default value is 0

pwdMaxAge

@ConfigurationElement(attributeType="ads-pwdMaxAge",
                      isOptional=true,
                      defaultValue="0")
private int pwdMaxAge

holds the number of seconds after which a modified password will expire. Default value is 0, does not expire. If not 0, the value must be greater than or equal to the value of the pwdMinAge.

pwdInHistory

@ConfigurationElement(attributeType="ads-pwdInHistory",
                      isOptional=true,
                      defaultValue="0")
private int pwdInHistory

specifies the maximum number of used passwords stored in the pwdHistory attribute. Default value is 0, no password history maintained

pwdCheckQuality

@ConfigurationElement(attributeType="ads-pwdCheckQuality",
                      isOptional=true,
                      defaultValue="0")
private int pwdCheckQuality

indicates how the password quality will be verified while being modified or added. Default value 0, do not check

pwdMinLength

@ConfigurationElement(attributeType="ads-pwdMinLength",
                      isOptional=true,
                      defaultValue="0")
private int pwdMinLength

this attribute holds the minimum number of characters that must be used in a password. Default value 0, no minimum length enforced

pwdMaxLength

@ConfigurationElement(attributeType="ads-pwdMaxLength",
                      isOptional=true,
                      defaultValue="0")
private int pwdMaxLength

this attribute holds the maximum number of characters that may be used in a password. Default value 0, no maximum length enforced

pwdExpireWarning

@ConfigurationElement(attributeType="ads-pwdExpireWarning",
                      isOptional=true,
                      defaultValue="0")
private int pwdExpireWarning

the maximum number of seconds before a password is due to expire that expiration warning messages will be returned to an authenticating user. Default value is 0, never send a warning message.

pwdGraceAuthNLimit

@ConfigurationElement(attributeType="ads-pwdGraceAuthNLimit",
                      isOptional=true,
                      defaultValue="0")
private int pwdGraceAuthNLimit

the number of times an expired password can be used to authenticate. Default value is 0, do not allow a expired password for authentication.

pwdGraceExpire

@ConfigurationElement(attributeType="ads-pwdGraceExpire",
                      isOptional=true,
                      defaultValue="0")
private int pwdGraceExpire

specifies the number of seconds the grace authentications are valid Default value is 0, no limit.

pwdLockout

@ConfigurationElement(attributeType="ads-pwdLockout",
                      isOptional=true,
                      defaultValue="false")
private boolean pwdLockout

flag to indicate if the account needs to be locked after a specified number of consecutive failed bind attempts. The maximum number of consecutive failed bind attempts is specified in pwdMaxFailure

pwdLockoutDuration

@ConfigurationElement(attributeType="ads-pwdLockoutDuration",
                      isOptional=true,
                      defaultValue="300")
private int pwdLockoutDuration

the number of seconds that the password cannot be used to authenticate due to too many failed bind attempts. Default value is 300 seconds.

pwdMaxFailure

@ConfigurationElement(attributeType="ads-pwdMaxFailure",
                      isOptional=true,
                      defaultValue="0")
private int pwdMaxFailure

the number of consecutive failed bind attempts after which the password may not be used to authenticate. Default value is 0, no limit on the number of authentication failures

pwdFailureCountInterval

@ConfigurationElement(attributeType="ads-pwdFailureCountInterval",
                      isOptional=true,
                      defaultValue="0")
private int pwdFailureCountInterval

the number of seconds after which the password failures are purged from the failure counter. Default value is 0, reset all pwdFailureTimes after a successful authentication.

pwdMustChange

@ConfigurationElement(attributeType="ads-pwdMustChange",
                      isOptional=true,
                      defaultValue="false")
private boolean pwdMustChange

flag to indicate if the password must be changed by the user after they bind to the directory after a password is set or reset by a password administrator. Default value is false, no need to change the password by user.

pwdAllowUserChange

@ConfigurationElement(attributeType="ads-pwdAllowUserChange",
                      isOptional=true,
                      defaultValue="true")
private boolean pwdAllowUserChange

indicates whether users can change their own passwords. Default value is true, allow change

pwdSafeModify

@ConfigurationElement(attributeType="ads-pwdSafeModify",
                      isOptional=true,
                      defaultValue="false")
private boolean pwdSafeModify

flag to specify whether or not the existing password must be sent along with the new password when being changed. Default value is false.

pwdMinDelay

@ConfigurationElement(attributeType="ads-pwdMinDelay",
                      isOptional=true,
                      defaultValue="0")
private int pwdMinDelay

the number of seconds to delay responding to the first failed authentication attempt Default value 0, no delay.

pwdMaxDelay

@ConfigurationElement(attributeType="ads-pwdMaxDelay",
                      isOptional=true,
                      defaultValue="0")
private int pwdMaxDelay

the maximum number of seconds to delay when responding to a failed authentication attempt.

pwdMaxIdle

@ConfigurationElement(attributeType="ads-pwdMaxIdle",
                      isOptional=true,
                      defaultValue="0")
private int pwdMaxIdle

the number of seconds an account may remain unused before it becomes locked Default value is 0, no check for idle time.

pwdValidator

@ConfigurationElement(attributeType="ads-pwdValidator",
                      isOptional=true)
private java.lang.String pwdValidator

the FQCN of the password validator

Constructor Detail

PasswordPolicyBean

public PasswordPolicyBean()

Method Detail

getPwdAttribute

public java.lang.String getPwdAttribute()

setPwdAttribute

public void setPwdAttribute(java.lang.String pwdAttribute)

getPwdMinAge

public int getPwdMinAge()

setPwdMinAge

public void setPwdMinAge(int pwdMinAge)

getPwdMaxAge

public int getPwdMaxAge()

setPwdMaxAge

public void setPwdMaxAge(int pwdMaxAge)

getPwdInHistory

public int getPwdInHistory()

setPwdInHistory

public void setPwdInHistory(int pwdInHistory)

getPwdCheckQuality

public int getPwdCheckQuality()

setPwdCheckQuality

public void setPwdCheckQuality(int pwdCheckQuality)

getPwdMinLength

public int getPwdMinLength()

setPwdMinLength

public void setPwdMinLength(int pwdMinLength)

getPwdMaxLength

public int getPwdMaxLength()

setPwdMaxLength

public void setPwdMaxLength(int pwdMaxLength)

getPwdExpireWarning

public int getPwdExpireWarning()

setPwdExpireWarning

public void setPwdExpireWarning(int pwdExpireWarning)

getPwdGraceAuthNLimit

public int getPwdGraceAuthNLimit()

setPwdGraceAuthNLimit

public void setPwdGraceAuthNLimit(int pwdGraceAuthNLimit)

getPwdGraceExpire

public int getPwdGraceExpire()

setPwdGraceExpire

public void setPwdGraceExpire(int pwdGraceExpire)

isPwdLockout

public boolean isPwdLockout()

setPwdLockout

public void setPwdLockout(boolean pwdLockout)

getPwdLockoutDuration

public int getPwdLockoutDuration()

setPwdLockoutDuration

public void setPwdLockoutDuration(int pwdLockoutDuration)

getPwdMaxFailure

public int getPwdMaxFailure()

setPwdMaxFailure

public void setPwdMaxFailure(int pwdMaxFailure)

getPwdFailureCountInterval

public int getPwdFailureCountInterval()

setPwdFailureCountInterval

public void setPwdFailureCountInterval(int pwdFailureCountInterval)

isPwdMustChange

public boolean isPwdMustChange()

setPwdMustChange

public void setPwdMustChange(boolean pwdMustChange)

isPwdAllowUserChange

public boolean isPwdAllowUserChange()

setPwdAllowUserChange

public void setPwdAllowUserChange(boolean pwdAllowUserChange)

isPwdSafeModify

public boolean isPwdSafeModify()

setPwdSafeModify

public void setPwdSafeModify(boolean pwdSafeModify)

getPwdMinDelay

public int getPwdMinDelay()

setPwdMinDelay

public void setPwdMinDelay(int pwdMinDelay)

getPwdMaxDelay

public int getPwdMaxDelay()

setPwdMaxDelay

public void setPwdMaxDelay(int pwdMaxDelay)

getPwdMaxIdle

public int getPwdMaxIdle()

setPwdMaxIdle

public void setPwdMaxIdle(int pwdMaxIdle)

getPwdId

public java.lang.String getPwdId()

Returns:

the pwdId

setPwdId

public void setPwdId(java.lang.String pwdId)

Parameters:

pwdId - the pwdId to set

getPwdValidator

public java.lang.String getPwdValidator()

Returns:

gives the FQCN of the password validator

setPwdValidator

public void setPwdValidator(java.lang.String pwdValidator)

Sets the password validator

Parameters:

pwdValidator - the FQCN of the password validator

toString

public java.lang.String toString(java.lang.String tabs)

Overrides:

toString in class AdsBaseBean

toString

public java.lang.String toString()

Overrides:

toString in class AdsBaseBean