Saturday, August 9, 2014

OID 11G: How to collect all password policies from all your tree levels using only one command.

Hello everyone,

I would like to share today how to get all pwd policies into oid using simple command. Even if they are into different tree levels you can get those by this process below:
[leoncio@ThiagoLeoncioserver~]$ ldapsearch -p 6501 -q -D "cn=orcladmin" -b " " -s sub "(objectclass=pwdpolicy)"
Please enter bind password:
cn=default,cn=pwdPolicies,cn=Common,cn=Products,cn=OracleContext,dc=thiagoleoncio,dc                                                                                                             =com
displayname=Password Policy for Realm dc=thiagoleoncio,dc=com
orclpwdminalphachars=0
pwdfailurecountinterval=0
orclpwdmaxrptchars=0
pwdlockoutduration=86400
objectclass=top
objectclass=pwdpolicy
pwdmaxfailure=10
orclpwdminuppercase=0
orclpwdencryptionenable=0
pwdminlength=6
orclpwdalphanumeric=1
cn=default
pwdlockout=0
pwdchecksyntax=1
orclpwdpolicyenable=1
pwdgraceloginlimit=6
pwdexpirewarning=604800
pwdmaxage=10368000
orclpwdminspecialchars=0
orclpwdminlowercase=0

cn=PolicyUserPolicy,cn=pwdPolicies,cn=Common,cn=Products,cn=OracleContext, dc=thiagoleoncio,dc=com
orclpwdminalphachars=0
pwdfailurecountinterval=0
orclpwdmaxrptchars=0
pwdlockoutduration=4600
objectclass=top
objectclass=pwdpolicy
pwdmaxfailure=4
orclpwdminuppercase=0
pwdminlength=6
orclpwdencryptionenable=0
orclpwdalphanumeric=1
cn=PolicyUserPolicy
pwdlockout=1
pwdchecksyntax=1
orclpwdpolicyenable=1
pwdgraceloginlimit=6
pwdexpirewarning=0
pwdmaxage=0
orclpwdminspecialchars=0
orclpwdminlowercase=0
cn=IDMPolicy,cn=pwdPolicies,cn=Common,cn=Products,cn=OracleContext
orclpwdminalphachars=0
pwdfailurecountinterval=0
orclpwdmaxrptchars=0
pwdlockoutduration=4600
objectclass=top
objectclass=pwdpolicy
pwdmaxfailure=4
orclpwdminuppercase=0
orclpwdencryptionenable=0
pwdminlength=8
orclpwdalphanumeric=1
cn=SystemIDPolicy
pwdlockout=1
pwdchecksyntax=1
orclpwdpolicyenable=1
pwdgraceloginlimit=6
pwdexpirewarning=0
pwdmaxage=0
orclpwdminspecialchars=0
orclpwdminlowercase=0


I hope it helps you and save your day, avoiding any struggling tries from your end. See you again next month.

Thiago Leoncio.