23.8.1 Notes on using a Directory Server linkage facility

You cannot set up password character string restrictions while you are using a Directory Server linkage facility. If password character string restrictions have already been set up when you begin using a Directory Server linkage facility, the restrictions will no longer be effective.

Before using a Directory Server linkage facility, it is strongly advised that you cancel the password character string restrictions.

Reference note
If you use a Directory Server linkage facility without cancelling the password character string restrictions, and then stop using the Directory Server linkage facility, the following problems may occur:
  • Users who were in violation of the password character string restrictions will not have been placed in password-invalid account lock state.
  • Users who are not in violation of the password character string restrictions may be placed in password-invalid account lock state.
  • DBA privilege holders and the auditor may be placed in password-invalid account lock state.