000012800 - AxM 6.0x: Admingui will not display all password and account dates

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012800
Applies ToAccess Manager 6.0.x
All unix and windows
iPlanet / Sun One Directory Server.
IssueAxM 6.0x: Admingui  will not display all password and account dates
AdminGUI password expiration, account creation and expiration date not appearing in admingui even though the ctscUserAuxClass is being used
The AdminGUI Edit Password Policy screen does not show password lifetime, history or Minimum Lifetime fields.
CauseWhen installing with the iplanet directory server, the admingui.cfg parameter disableuserextentions=true, which prevents these fields from being displayed.  This parameter provides granular control for whether to display the optional attributes included in ctscUserAuxClass.  The ctscUserAuxClass is an optional objectclass which can be used to populate and use additional password fields that are not native to the datastore.  The default should be false for iPlanet/SunOne directory server.  Active Directory's Access Manager schema does not use ctscUserAuxClass by default so disableuserextentions should be true for AD.

Set disableuserextentions to false when using the optional objectclass of ctscUserAuxClass

# When set to true, this parameter disables user extensions in systems
# where the data source is Active Directory. Since the Active Directory
# Data Adapter does not utilize user extensions, they should be disabled to
# prevent administrators from viewing or using those data fields in the
# Console.
# Allowed Values:
#   true | false
# Default Value:
#   true for Active Directory, false for other Data Adapters.
# Note:
#   The product-specific installers for RSA ClearTrust Data Adapters set
#   this parameter according to the appropriate Default Value:. However,
#   if you copy a "generic" admingui.cfg file from the product media or
#   another source, you must set this parameter manually.

Legacy Article IDa47077