You cannot set up password character string restrictions while you are using a Directory Server linkage facility. If password character string restrictions have already been set up when you begin using a Directory Server linkage facility, the restrictions will no longer be effective.

Before using a Directory Server linkage facility, it is strongly advised that you cancel the password character string restrictions.

Reference note

If you use a Directory Server linkage facility without cancelling the password character string restrictions, and then stop using the Directory Server linkage facility, the following problems may occur:

• Users who were in violation of the password character string restrictions will not have been placed in password-invalid account lock state.
• Users who are not in violation of the password character string restrictions may be placed in password-invalid account lock state.
• DBA privilege holders and the auditor may be placed in password-invalid account lock state.