5.13 Enabling Universal Password Policy for DSfW

As part of DSfW provisioning, the Universal Password Policy is enabled on the partition that is being mapped to a domain. Beginning with OES2 SP3, this is extended to cover all the partitions that are mapped to a particular DSfW domain.

However, if the Universal Password Policy is already enabled in your environment and if you don't want to override it, then you must select the Retain existing Novell Password Policies on Users check box during DSfW installation. For more information, see Step 9.d. Beginning with OES2 SP3, selecting this check box will mean that the already enabled Universal Password Policy in your environment is applicable to all the partitions that is being planned to be mapped to a particular DSfW domain. If you do not select this check box, then the users belonging to a partition (mapped to a DSfW domain) that does not have Universal Password Policy defined, will not be able to login to the DSfW domain.

For Universal Password Policies defined in your DSfW environment, you must ensure that you select the Synchronize Distribution Password when setting Universal Password check box in Novell iManager.

  1. Start a browser and point to http:// ip_address_of_server/nps/iManager.html.

    For example, http://192.168.1.1/nps/iManager.html.

  2. Accept the certificate, enter the Administrator account/password and eDirectory tree, and click Login.

  3. Select Passwords > Password Policies.

  4. Click the password policy, then click Universal Password > Configuration Options.

  5. Select the  Synchronize Distribution Password when setting Universal Password check box.

If you do not select this check box, you will experience password synchronization issues.