Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual page 705

WARNING: Locked Accounts in Security Sensitive Environments
Do not use the Disclose Account Locked Status option if your environ-
ment is sensitive to security issues, because the "Locked Account"
error message provides security sensitive information that can be
exploited by a potential attacker.
4d Enter the DN of the default policy object. To use a DN other than the one
suggested by YaST, enter your choice. Otherwise accept the default setting.
5 Complete the database configuration by clicking Finish.
If you have not opted for password policies, your server is ready to run at this point. If
you chose to enable password policies, proceed with the configuration of the password
policy in detail. If you chose a password policy object that does not yet exist, YaST
creates one:
1 Enter the LDAP server password.
2 Configure the password change policies:
2a Determine the number of passwords stored in the password history. Saved
passwords may not be reused by the user.
2b Determine whether users can change their password and whether they need
to change their password after a reset by the administrator. Optionally require
the old password for password changes.
2c Determine whether and to what extent passwords should be subject to qual-
ity checking. Set a minimum password length that must be met before a
password is valid. If you select Accept Uncheckable Passwords, users are
allowed to use encrypted passwords although the quality checks cannot be
performed. If you opt for Only Accept Checked Passwords only those pass-
words that pass the quality tests are accepted as valid.
3 Configure the password aging policies:
3a Determine the minimum password age (the time that needs to pass between
two valid password changes) and the maximum password age.
LDAP—A Directory Service 687