token-generate-password

If a password policy is specified for this token, NMAS uses this policy for generating passwords. For successful password generation, this password policy must exclude the rules that requires a user object lookup in eDirectory. For example, you should not use a policy to generate passwords using the generate password token if it requires the newly created password to be different from the user's password history that needs eDirectory user object lookup for comparison. Instead, create a new password policy similar to the existing password policy and exclude the rules that require a user lookup in eDirectory. Do not assign the new password policy to the user container. Instead, use it only to generate the random password for users from the Identity Manager policies when the user is added.

Example

<token-generate-password policy-dn="..\my password policy"/>

Allowed Content

EMPTY

Attributes

Attribute	Possible Values	Default Value
notrace	true \| false True if this element should not be traced during execution of the policy.	false
policy-dn	CDATA Slash form DN of a nspmPasswordPolicy object. Can be relative to the including policy. Supports variable expansion.	#IMPLIED

Attribute

Possible Values

Default Value

notrace

true | false

True if this element should not be traced during execution of the policy.

false

policy-dn

CDATA

Slash form DN of a nspmPasswordPolicy object. Can be relative to the including policy. Supports variable expansion.

#IMPLIED

Content Declaration

Empty

Parent Elements

Element	Description
arg-association	Association argument.
arg-component	Component argument.
arg-dn	DN argument.
arg-node-set	Node set argument.
arg-password	Password argument.
arg-string	String argument.
arg-value	Value argument.
token-base64-decode	Decode base64 data into a string.
token-base64-encode	Encode a string into base64 data.
token-convert-time	Convert a data/time from one format to another format.
token-escape-for-dest-dn	Convert a string for use in the destination DN.
token-escape-for-src-dn	Convert a string for use in a source DN.
token-join	Join a node set into a string.
token-lower-case	Convert a string to lowercase.
token-map	Map a string through a mapping table.
token-parse-dn	Parses or converts a DN.
token-replace-all	Replaces all instances of a substring with a string.
token-replace-first	Replaces a single instance of a substring within a string.
token-split	Splits a string into a node set.
token-substring	Substring of a string.
token-upper-case	Converts a string to uppercase.
token-xml-parse	Parses XML.
token-xml-serialize	Serializes XML.