com.ibm.passwordrules.standard
Class NotInDictionary

java.lang.Object
  |
  +--com.ibm.passwordrules.BehavioralRule
        |
        +--com.ibm.passwordrules.standard.NotInDictionary
All Implemented Interfaces:
java.lang.Cloneable, Rule, java.io.Serializable

public class NotInDictionary
extends BehavioralRule

This class implements the built-in rule for not allowing passwords to be matched against a password dictionary entries present in the LDAP directory. In order to use this rule, user must first populate the password dictionary in LDAP by importing an LDIF data containing the set of weak passwords to be avoided into the LDAP directory under erdictionaryname=password, ou=itim, %ROOT_SUFFIX%. Each entry must be of the erDictionaryItem objectclass. Required attribute on each entry is 'erWord'. It should contain the disallowed password phrase. It is also the naming attribute of each entry. Optional attribute on each entry is 'description', which may contain the reason for avoiding the word.

See Also:
Serialized Form

Field Summary
static java.lang.String FOUND_IN_DICTIONARY
          Constant representing a message key in a property file
 
Constructor Summary
NotInDictionary()
          Default constructor.
 
Method Summary
 boolean inDictionary(java.lang.String password)
          Check to see if the given string exisits in the dictionary (always case insensitive).
 boolean join(Rule rule)
          Try to join the specified rule with this one.
 boolean validate(java.lang.String password, ValidationInfo validationInfo)
          Validate the given password using the given validation info.
 
Methods inherited from class com.ibm.passwordrules.BehavioralRule
constrain, getParameter, setParameter, validateSafe
 
Methods inherited from class java.lang.Object
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

FOUND_IN_DICTIONARY

public static final java.lang.String FOUND_IN_DICTIONARY
Constant representing a message key in a property file

See Also:
Constant Field Values
Constructor Detail

NotInDictionary

public NotInDictionary()
Default constructor.

Method Detail

validate

public boolean validate(java.lang.String password,
                        ValidationInfo validationInfo)
                 throws InvalidPasswordException
Validate the given password using the given validation info.

Specified by:
validate in interface Rule
Overrides:
validate in class BehavioralRule
Parameters:
validationInfo - contains contextual information about the password being validated.
password - Password to validate.
Returns:
always return true
Throws:
InvalidPasswordException - thrown when password is invalid.

join

public boolean join(Rule rule)
             throws IncompatibleRulesException
Try to join the specified rule with this one. The more restrictive rule takes precedence.

Specified by:
join in interface Rule
Overrides:
join in class BehavioralRule
Parameters:
rule - The rule to be joined with this one.
Returns:
True if the rule was successfully joined.
Throws:
IncompatibleRulesException - Thrown when given rule cannot be joined because it is not compatible.

inDictionary

public boolean inDictionary(java.lang.String password)
Check to see if the given string exisits in the dictionary (always case insensitive).

Parameters:
password - Clear text password to check.
Returns:
true if value exists in dictionary, false otherwise.


IBM Tivoli Identity Manager 4.6
© Copyright International Business Machines Corporation 2005. All rights reserved. US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.