GREETINGS,

HOPING THIS IS AN EASY QUESTION....

I'M USING IDM 3.6.1 & NEED TO CREATE A SIMPLE RULE THAT WILL SEND AN
E-MAIL TO A USER IF THEIR UNIVERSAL PASSWORD WAS RESET ADMINISTRATIVELY.
I'VE BEEN TRYING TO DO THIS KEYING OFF THE PASSWORD EXPIRATION TIME
VALUE WITHOUT ANY LUCK (PASSWORD EXPIRATION TIME IS CONFIGURED TO EXPIRE
IMMEDIATELY IF UP IS RESET BY AN ADMIN). IS THERE POSSIBLY ANYTHING IN
THE OPERATION BESIDES PASSWORD EXPIRATION TIME THAT CAN BE USED TO
DISCERN AN ADMIN PWD RESET FROM A USER PWD REST (WHICH PUSHES PWD EXPIRE
TIME OUT 60 DAYS BY POLICY).

-<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.6.15.5883">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify cached-time="20130405133328.586Z" class-name="User"
event-id="server1#20130405133328#1#1"
qualified-src-dn="O=company\OU=IDENTITIES\CN=user"
src-dn="\TREE\company\IDENTITIES\user" src-entry-id="38287"
timestamp="1365168808#15">
<association
state="associated">{865FC102-5C45-a544-0D9F-865FC1025C45}</association>
<modify-attr attr-name="Password Expiration Time">
<remove-value>
<value timestamp="1365168699#12"
type="time">1365168699</value>
</remove-value>
<add-value>
<value timestamp="1365168808#12"
type="time">1365168808</value>
</add-value>
</modify-attr>
<modify-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</modify-attr>
</modify>
</input>
</nds>-

*Regards,
Kerry Tholl*


--
ktholl
------------------------------------------------------------------------
ktholl's Profile: https://forums.netiq.com/member.php?userid=4737
View this thread: https://forums.netiq.com/showthread.php?t=47502