OpenText NetIQ eDirectory Community

Identity Console : Customize custom forms

Jean-baptiste Charpentier

In iManager it was possible to choose the type of UI component (check box, radio button, text area, select list) and more generally, the forms could be edit and customize (add javascript function, java call etc...). We should be able to do the same…
- 5 months ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
CEF Auditing should support audit of SCHEMA changes

Zan

In Novell Auditing there is an option to audit schema changes https://www.netiq.com/documentation/edirectory-92/edir_admin/data/bydeiav.html#b1191632 here you can see there is an option to log events of type Schema , we would like to do the same thing…
- 11 months ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
diagpwd: display password encryption algorithm, 3DES or AES256

ungnad

With eDirectory 9.x an AES 256-Bit tree key can be created to have eDir use AES256 instead of 3DES when encrypting data. It would be great if diagpwd could display with which algorithm the password of individual users is currently encrypted. In case you…
- over 1 year ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
View Driver Logs from Identity Console

Wayne Jefferson

Would be great to be able to view driver and trace logs from within Identity Console.
- over 1 year ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Offer OpenSSL version 3.x capabilities for LDAP-TLS connections

Michael Golor

The current eDirectory releases (9.2.7 as of May '23) still uses OpenSSL version 1.0.2, whose development stopped in 2018 and therefore only offers cipher suites and protocols from that time. Most importantly, TLSv1.3 is not provided at all. As a consequence…
- over 1 year ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Extend NMAS Password Policy

tschloesser

It would be great to have the option to define alternative rules in one password policy for a user. LAst week the CSO of our customer asked me to re-configure the password policy to: - force letters nad Numbers or -force letters and special characters…
- over 2 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
function storing attribute data using deflate or gzip compression to overcome OctedString size limitations

kgast

This could prevent schema changes or LDAP attribute mapping in case of breaking the size limitation for attribute data (OctedString). Many services store XML configuration data nowadays in attributes which can very well be compressed
- over 2 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
PBKDF2 iteration count

alekz

According to the documentation, by default the iteration count is set to 1. That seems quite low. When the standard was written the minimum was 1000: https://datatracker.ietf.org/doc/html/rfc2898#section-4.2 According to OWASP the recommended iteration…
- over 2 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
ndsbackup for eDirectory for Windows

mjuricek

Backups are essential! And setting a backup of eDir at our customers should be one of the first things which should be implemented. eDirectory running on Linux servers allows us several possibilities who to provide a backup. Each option has some advantages…
- over 3 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
No Intruder Lock Out Duration - Set duration to minutes, not just hours

raechell26

Screen Shot 2020-10-16 at 2.22.07 PM.png We would like to request an enhancement to the "No Intruder Lock Out Duration" feature. Can it be made so, you can choose a duration of some minutes, rather than just hours? The lowest duration period you can set…
- over 4 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Add more LDAP fields to CEF logging

bandries

LDAP_CONNECTION: Server port number / Secure Connection / Start TLS LDAP_BIND: Anonymous / Unauthenticated / Authenticated BIND LDAP_BIND: Response Time LDAP_SEARCH: Search Event Data (AND filter AND attributes AND extended operation, not OR) LDAP_SEARCH_RESPONSE…
- over 4 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Log name of driver as modifier/initiator instead of server name

alekz

When a driver modifies attributes and objects, the server name is seen as the initiator in e.g. Sentinel. When you have more than 1 driver this makes it impossible to know which driver made what change and makes troubleshooting dependent on IDM driver…
- over 4 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
ndsbackup increase the limit of 255 include file

heili

We have about 600000 Userobjects in one OU. lately we had problems with the Schema in the Meta-direcrory, as a result, that 80000 objects were corrupt. So we have to restore this 80000 Objects. With the Limit of 255 Objects in the include File, ist was…
- over 5 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Add TLS/SSL version to the TLS Connection information in ndstrace and XDAS

Jeff Migliaro

Currently there is no way to tell what version of SSL/TLS is being used in ndstrace and or XDAS for a network connection via LDAP and network trace has to be completed to get the information. This can be time consuming and hard to perform in very large…
- over 6 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
New attribute syntaxes

alekz

We have customers where we are storing XML documents and JSON documents as case ignore strings. The problem is searching those attributes becomes slow. You have to do substring searches. SQL databases have long supported native XML and JSON data types…
- over 6 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
TOTP support on eDir

MigrationDeletedUser

Currently eDir supports HOTP for strong authentication. A customer wants to implement TOTP using eDirectory so they could get a solution that is more user friendly (no need to resynchronize) and also more security (small window for attacks to guess the…
- over 6 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
Provide a threshold for attributes to not grow beyond a certain number of values

MigrationDeletedUser

Currently, eDirectory does not have a limit upto which an attribute can grow. Some attributes (even custom) can grow to more than 100K and this can cause a sync melt-down of sorts. It would be good to have a threshold upto which attributes can grow. It…
- over 6 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas
eDirectory to provide a way to monitor high value attributes outside of "Value Report" in iMonitor

MigrationDeletedUser

Hello, Over a period of time, we see a lot of issues with "Dirxml-Entitlement Result" growing to over 100000 values. We fix it with repair after there is a sync issue. But it would be a good idea to monitor high values outside of iMonitor. With cn=monitor…
- over 6 years ago
- OpenText NetIQ eDirectory
- eDirectory Ideas

Menu

OpenText NetIQ eDirectory

Identity Console : Customize custom forms

CEF Auditing should support audit of SCHEMA changes

diagpwd: display password encryption algorithm, 3DES or AES256

View Driver Logs from Identity Console

Offer OpenSSL version 3.x capabilities for LDAP-TLS connections

Extend NMAS Password Policy

function storing attribute data using deflate or gzip compression to overcome OctedString size limitations

PBKDF2 iteration count

ndsbackup for eDirectory for Windows

No Intruder Lock Out Duration - Set duration to minutes, not just hours

Add more LDAP fields to CEF logging

Log name of driver as modifier/initiator instead of server name

ndsbackup increase the limit of 255 include file

Add TLS/SSL version to the TLS Connection information in ndstrace and XDAS

New attribute syntaxes

TOTP support on eDir

Provide a threshold for attributes to not grow beyond a certain number of values

eDirectory to provide a way to monitor high value attributes outside of "Value Report" in iMonitor

Resources

Menu

Popular Tags

Resources