Subject: [Fwd: I-D ACTION:draft-behera-ldap-password-policy-02.txt]

From: Ludovic Poitou <[email-masked]>
Date: Wed, 12 Jul 2000 14:57:03 +0200

LDAPEXTers,

Could you please review and comment the following internet draft ?

Changes from previous version :

- Changed the pwdGraceLeft attribute (integer counter) into a pwdGraceUseTime
(UTCTime).

- Updated the security section.

- Minor editing changes.

Thanks,

Ludovic.

[email-masked] wrote:

A New Internet-Draft is available from the on-line
Internet-Drafts directories.

Title
: Password Policy for LDAP Directories

Author(s)
: P. Behera, V. Chu, L. Poitou, J. Sermersheim

Filename
: draft-behera-ldap-password-policy-02.txt

Pages
: 27

Date
: 11-Jul-00

Password policy is a set of rules that controls how passwords are

used in LDAP directories. In order to improve the security of LDAP

directories and make it difficult for password cracking programs to

break into directories, it is desirable to enforce a set of rules on

password usage.  These rules are made to ensure that users change

their passwords periodically, passwords meet construction

requirements, the re-use of old password is restricted, and users

are locked out after a certain number of failed attempts.

A URL for this Internet-Draft is:

http://www.ietf.org/internet-drafts/draft-behera-ldap-password-policy-02.txt

Internet-Drafts are also available by anonymous FTP. Login with the
username

"anonymous" and a password of your e-mail address. After logging in,

type "cd internet-drafts" and then

"get draft-behera-ldap-password-policy-02.txt".

A list of Internet-Drafts directories can be found in

http://www.ietf.org/shadow.html

or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

Internet-Drafts can also be obtained by e-mail.

Send a message to:

[email-masked].

In the body type:

"FILE /internet-drafts/draft-behera-ldap-password-policy-02.txt".

NOTE:   The mail server at ietf.org can return the document
in

MIME-encoded form by using
the "mpack" utility.  To use this

feature, insert the command
"ENCODING mime" before the "FILE"

command.  To decode
the response(s), you will need "munpack" or

a MIME-compliant mail reader.
Different MIME-compliant mail readers

exhibit different behavior,
especially when dealing with

"multipart" MIME messages
(i.e. documents which have been split

up into multiple messages),
so check your local documentation on

how to manipulate these
messages.

Below is the data which will enable a MIME compliant mail reader

implementation to automatically retrieve the ASCII version of the

Internet-Draft.

------------------------------------------------------------------------

Content-Type: text/plain

Content-ID:     <[email-masked]>

--
Ludovic Poitou
Sun Microsystems Inc.
iPlanet E-Commerce Solutions - Directory Group - Grenoble - France