This setting applies to the NMAS client. The challenge/response questions allow for any response, such as a word, a sentence, or a phrase. Because it might be difficult to correctly type a phrase or sentence when the text is hidden, answers are not hidden with asterisks by default, like passwords usually are. However, as an added layer of security, you can configure the challenge/response LCM to hide the user's responses to the challenge questions. For example, when this functionality is enabled, instead of the user's response reading "my son charlie" in plain text, the response reads "** *** *******." See Section 6.3 "Using Forgotten Password Self-Service" in the Novell Client 2 SP3 for Windows Administration Guide.
Default is 'Off'.