Name | Data Type | Default Value | Qualifiers |
Name | Data Type | Value |
CreationClassName | string | |
Description | string | CreationClassName indicates the name of the class or the subclass used in the creation of an instance. When used with the other key properties of this class, this property allows all instances of this class and its subclasses to be uniquely identified. |
Key | boolean | true |
MaxLen | uint32 | 256 |
Name | string | |
Description | string | The Name property defines the label by which the object is known. The value of this property may be set to be the same as that of the UserID property or, in the case of an LDAP-derived instance, the Name property value may be set to the distinguishedName of the LDAP-accessed object instance. |
Key | boolean | true |
MaxLen | uint32 | 1024 |
Override | string | Name |
OtherUserPasswordEncryptionAlgorithm | string | |
Description | string | If the UserPasswordEncryptionAlgorithm property is set to 1 ("Other") this property contains a free form string that provides more information about the encryption algorithm. If UserPasswordEncryptionAlgorithm is not set to 1 ("Other") this property has no meaning. |
ModelCorrespondence | string | CIM_Account.UserPasswordEncryptionAlgorithm |
SystemCreationClassName | string | |
Description | string | The scoping System's CCN. |
Key | boolean | true |
MaxLen | uint32 | 256 |
Propagated | string | CIM_System.CreationClassName |
SystemName | string | |
Description | string | The scoping System's Name. |
Key | boolean | true |
MaxLen | uint32 | 256 |
Propagated | string | CIM_System.Name |
UserID | string | |
Description | string | UserID is the value used by the SecurityService to represent identity. For an authentication service, the UserID may be the name of the user, or for an authorization service the value which serves as a handle to a mapping of the identity. |
MaxLen | uint32 | 256 |
UserPasswordEncryptionAlgorithm | uint16 | |
Description | string | The encryption algorithm (if any) used by the client to produce the value in the UserPassword property when creating or modifying an instance of CIM_Account. The original password is encrypted using the algorithm specified in this property, and UserPassword contains the resulting encrypted value. In response to an operation request that would return the value of the UserPassword property to a client, an implementation shall instead return an array of length zero.
The value of UserPasswordEncryptionAlgorithm in an instance of CIM_Account shall be 0 ("None") unless the SupportedUserPasswordEncryptionAlgorithms[] property in the CIM_AccountManagementCapabilities instance associated with the CIM_AccountManagementService instance associated with the CIM_Account instance contains a non-null entry other than 0 ("None").
This property does not prevent the use of encryption at the transport, network, or data-link layer to protect communications between a management client and the server, nor is it meant to encourage communications without such encryption.
The supported values for this property are:
- 0 ("None"): Indicates that the contents of UserPassword are not encrypted.
- 1 ("Other"): Indicates that the contents of UserPassword are encrypted using an algorithm not specifically identified in the value map for this property, and that this algorithm is described in OtherUserPasswordEncryptionAlgorithm.
- 2 ("HTTP Digest MD5(A1)"): The MD5 hash algorithm, applied to the string A1 defined in RFC2617 as the concatenation username-value ":" realm-value ":" passwd, where username-value is provided by the client as the value of the UserID property. passwd is the underlying user password. realm-value is the HTTP digest realm value, and is provided by the server. The semantics of the HTTP digest realm are specified in RFC 2617. The server may surface the realm-value in the UserPasswordEncryptionSalt property of CIM_AccountManagementCapabilities. |
ModelCorrespondence | string | CIM_Account.UserPassword, CIM_Account.OtherUserPasswordEncryptionAlgorithm, CIM_AccountManagementCapabilities.SupportedUserPasswordEncryptionAlgorithms, CIM_AccountManagementCapabilities.UserPasswordEncryptionSalt |
ValueMap | string | 0, 1, 2, .. |
Values | string | None, Other, HTTP Digest MD5(A1), DMTF Reserved |
Descriptions | string[] | |
Description | string | The Descriptions property values may contain human-readable descriptions of the object. In the case of an LDAP-derived instance, the description attribute may have multiple values that, therefore, cannot be placed in the inherited Description property. |
MaxLen | uint32 | 1024 |
Host | string[] | |
Description | string | Based on RFC1274, the host name of the system(s) for which the account applies. The host name may be a fully-qualified DNS name or it may be an unqualified host name. |
LocalityName | string[] | |
Description | string | This property contains the name of a locality, such as a city, county or other geographic region. |
ObjectClass | string[] | |
Description | string | In the case of an LDAP-derived instance, the ObjectClass property value(s) may be set to the objectClass attribute values. |
OrganizationName | string[] | |
Description | string | The name of the organization related to the account. |
Required | boolean | true |
OU | string[] | |
Description | string | The name of an organizational unit related to the account. |
SeeAlso | string[] | |
Description | string | In the case of an LDAP-derived instance, the SeeAlso property specifies distinguished name of other Directory objects which may be other aspects (in some sense) of the same real world object. |
UserCertificate | string[] | |
Description | string | Based on inetOrgPerson and for directory compatibility, the UserCertificate property may be used to specify a public key certificate for the person. |
OctetString | boolean | true |
UserPassword | string[] | |
Description | string | In the case of an LDAP-derived instance, the UserPassword property may contain an encrypted password used to access the person's resources in a directory. |
OctetString | boolean | true |