OpenText NetIQ eDirectory Community

Ability to restrict ciphers used by Identity Console on port 9000

Jeff Migliaro

I have several Government Agencies that are limited by policy, which ciphers they are allowed to use. It appears that with Identity Console 1.72, that there is not a way to limit which ciphers are used/presented. The idea is to implement a way to…
- 8 months ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Support external IDP/identity service for OSP integrated Identity Console configuration

pborenich

"OSP for IDM" supports multiple external IDPs/identity services for SSO/federation as described in the documentation: https://www.netiq.com/documentation/identity-manager-48/identity_apps_admin/data/configure-single-sign-on-access.html According to…
- 8 months ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
CEF Auditing should support audit of SCHEMA changes

Zan

In Novell Auditing there is an option to audit schema changes https://www.netiq.com/documentation/edirectory-92/edir_admin/data/bydeiav.html#b1191632 here you can see there is an option to log events of type Schema , we would like to do the same thing…
- 11 months ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Currently NAM and IDM is having TLS 1.1 on fir iMonitor Service which vulnerable need to force this service on TLS 1.2 or TLS 1.3

Indranil Gharai

Hi Team, During VAPT , it was found that the 8030 port which is used to access iMonitor on the eDirectory LDAP and Access Manager server accepts TLS 1.0 and 1.1 connection, as it is outdated version Infra Team is considering this as a vulnerability, Those…
- over 1 year ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Force TLS 1.2 for httpstk using RSA

jamswa

Many environments still use RSA certificates, yet need to force TLS 1.2. Currently (9.2.7) RSA cert with httpBindRestrictions set to 3 allows both TLS 1.1 and 1.2. Possibly an httpSSLConfig attribute where a Cipher could be set similar to that wich…
- over 1 year ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Identity Console has non-standard FQDN syntax

kmaule2

It appears that the most frequent view of Full DNs is leaf-most object on the right with tree name on the left. Traditionally NDS has displayed leaf-most to the left and no tree name. Cut and paste cannot be done and instead of commas or periods between…
- over 2 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Identity Console Silent Install option

kmaule2

It would be good to have a silent non-interactive install based on a conf file. This would help us script the install.
- over 2 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Extend NMAS Password Policy

tschloesser

It would be great to have the option to define alternative rules in one password policy for a user. LAst week the CSO of our customer asked me to re-configure the password policy to: - force letters nad Numbers or -force letters and special characters…
- over 2 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
ndsbackup for eDirectory for Windows

mjuricek

Backups are essential! And setting a backup of eDir at our customers should be one of the first things which should be implemented. eDirectory running on Linux servers allows us several possibilities who to provide a backup. Each option has some advantages…
- over 3 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Indexing - candidate monitoring and alerting

issaqua

Hi guys, It could be very helpful to have a report that runs periodically (once per week?) that notifies customers of fields that could/should be indexed. This could prevent performance and (in extreme cases) availability issues. It would be even nicer…
- over 3 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Password Policy check against HaveIBeenPwned

Ken Etter

It would be very helpful if the Password Policy could be checked for breached or pwned passwords. The most obvious choice would be to use Troy Hunt's Have I Been Pwned service. It would be great if it could verify individual users password choice when…
- over 3 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Virtual attributes

rivey

It would be nice to have attributes that follow other attributes to mirror additional attributes. For example, manager is a DN. I'd like to be able to configure other attributes, such as managertelephone, manageremail, managerfullname, etc. These attributes…
- over 4 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Config Delta

rivey

Have a configuration utility that allows the comparison between edirectory servers to compare configurations. Essentially, we will have various environments with different settings and sometimes we skip a step or forget to update the build documentation…
- over 4 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
update universal password policy to support latest NIST guidelines

John_Walker

https://pages.nist.gov/800-63-3/sp800-63b.html Current behavior - password expires when admin resets only works if "Number of days before password expires" is enabled. Proposed behavior - password expires when admin resets without configuring a password…
- over 4 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Allow Customization of Default Fields on General Identitification Tab

MigrationDeletedUser

The iManager interface does not allow for a quick user creation workflow. Basic fields that should be common are not part of the user creation or readily available on the the Identification Tab. Example Mobile Number is very common these days. To be forced…
- over 5 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
ndstrace limited logging when high number of requests are happening on the server

fp_idmworks

Problem: I had a customer that had a looping on a script that continually queried LDAP over and over relentlessly and as it was poorly written code that didn't escape the loop, eDirectory troubleshooting was limited as the ndstrace would not show what…
- over 5 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Add parameters to ndsconfig set for username and password

Dieseloreo

while scripting changes for eDirectory, some of the items require authentication and there is no command line options for providing the username and password for the change. please provide the switches to allow for passing of username and password in…
- over 5 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Add ability to do a dictionary search for password changes

geistc

In eDirectory universal password policies you can specify a small set of words in a word list that are not allowed in passwords. For people that have to follow government requirements such as ARS controls this isn't enough. We need to be able to do a…
- over 6 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Modify the password policy expiration mechanism so that the initial password assigned to a new user will trigger the mechanism.

gathagan

Currently, when you create a new user and assign them to a policy that has the "Do not expire the user's password when the administrator sets the password" setting disabled, that new user will NOT be required to change their password upon initial login…
- over 6 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Update the iManager UI to align with the new IDM 4.6 UX

issaqua

It would be nice to update the iManager User interface/experience to create a consistent and up to date user experience between IDM & eDir. e.g. It would be great to update small things like the interface/controls to add/remove/edit fields.
- over 7 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas

Menu

OpenText NetIQ eDirectory

Ability to restrict ciphers used by Identity Console on port 9000

Support external IDP/identity service for OSP integrated Identity Console configuration

CEF Auditing should support audit of SCHEMA changes

Currently NAM and IDM is having TLS 1.1 on fir iMonitor Service which vulnerable need to force this service on TLS 1.2 or TLS 1.3

Force TLS 1.2 for httpstk using RSA

Identity Console has non-standard FQDN syntax

Identity Console Silent Install option

Extend NMAS Password Policy

ndsbackup for eDirectory for Windows

Indexing - candidate monitoring and alerting

Password Policy check against HaveIBeenPwned

Virtual attributes

Config Delta

update universal password policy to support latest NIST guidelines

Allow Customization of Default Fields on General Identitification Tab

ndstrace limited logging when high number of requests are happening on the server

Add parameters to ndsconfig set for username and password

Add ability to do a dictionary search for password changes

Modify the password policy expiration mechanism so that the initial password assigned to a new user will trigger the mechanism.

Update the iManager UI to align with the new IDM 4.6 UX

Resources

Menu

Popular Tags

Resources