Technote (FAQ)
Question
Many organizations do not know who has or has not answered the ITIM User challenge response questions. In order to find out an ITIM LDAP administrator can query for all system users who have not answered the challenge response questions.
Answer
Use a LDAP query in the ITIM LDAP to find all users who have no entries for the following binary data. Query must be done at the ou=systemUsers,ou=ITIM,ou=<tenant>,<suffix> level.
(!(erLostPasswordAnswer=*))
The results will provide you a list when exported of system users who you can then notify to answer the challenge response questions.
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.