
GSS-API to a Kerberos domain. Additional SASL tools have been added to the Mozilla LDAP C
SDK.
1.4. Enhanced Password Syntax Checking
Password syntax checking enforces rules for password strings, so that any password has to
meet or exceed certain criteria. Directory Server 8.0 adds password syntax checking to better
enforce its password policies. All password syntax checking can be applied globally, per
subtree, or per user.
In changes to the default password policies, the default minimum password length in Directory
Server 8.0 has been set to eight characters, and checks for trivial words has been improved. A
trivial word is any value stored in the uid, cn, sn, givenName, ou, or mail attributes of the user's
entry. Additionally, Directory Server 8.0 includes more password enforcement options, providing
different optional categories for the password syntax:
• Minimum number of digit characters (0-9)
• Minimum number of ASCII alphabetic characters, both upper- and lower-case
• Minimum number of uppercase ASCII alphabetic characters
• Minimum number of lowercase ASCII alphabetic characters
• Minimum number of special ASCII characters, such as !@#$
• Minimum number of 8-bit characters
• Maximum number of times that the same character can be immediately repeated, such as
aaabbb
• Minimum number of character categories required per password; a category can be upper- or
lower-case letters, special characters, digits, or 8-bit characters
1.5. Support for IPv6
Directory Server 8.0 accepts incoming connections from IPv6 clients. Additionally, IPv6 support
has been added to the LDAP SDK, so many command-line tools and scripts included with
Directory Server 8.0 can understand and use IPv6 addresses.
NOTE
Directory Server will not interpret IPv6 addresses in access control instructions or
use IPv6 connections for operations such as replication and chaining.
1.6. Changed Platform Support
Enhanced Password Syntax Checking
3
Comentarios a estos manuales