Alcatel-Lucent 6850-48 Guida Di Rete

LDAP Servers

Managing Authentication Servers

page 35-22

OmniSwitch AOS Release 6 Network Configuration Guide

Password policies applied to user accounts vary slightly from one directory server to another. Normally, 
only the password changing policies can be set by users through the directory server graphical user inter-
face (GUI). Other policies accessible only to Network Administrators through the directory server GUI 
may include one or more of the following operational parameters.

• Log-in Restrictions

• Change Password

• Check Password Syntax

• Password Minimum Length

• Send Expiration Warnings

• Password History

• Account Lockout

• Reset Password Failure Count

• LDAP Error Messages (e.g., Invalid Username/Password, Server Data Error, etc.)

For instructions on installing LDAP-enabled directory servers, refer to the vendor-specific instructions.

DN of directory entry where search is initiated.

Attributes to be returned for entry search results. All attributes are 
returned if search attributes are not specified. 

Different results are retrieved depending on the scopes associated 
with entry searches. 

“base” search: retrieves information about distinguished name as 
specified in URL. This is a <base_dn> search. Base searches are 
assumed when the scope is not designated.

“one” (one-level) search: retrieves information about entries one 
level under distinguished name (<base_dn> as specified in the 
URL, excluding the base entry.

“sub” (subtree) search: retrieves information about entries from all 
levels under the distinguished name (<base_dn>) as specified in 
the URL, including the base entry.

Search filters are applied to entries within specified search scopes. 
Default filter objectClass=* is used when filters are not designated. 
(Automatic search filtering not yet available.)