Passwordlockoutduration (Pwdlockoutduration); Passwordmaxage (Pwdmaxage); Passwordmaxfailure (Pwdmaxfailure) - Red Hat DIRECTORY SERVER 7.1 - SCHEMA Reference

Operational Attributes

passwordLockoutDuration (pwdLockoutDuration)

Definition
Indicates the amount of time in seconds during which users will be locked out of
the directory after an account lockout. The account lockout feature protects
against hackers who try to break into the directory by repeatedly trying to guess a
user s password. You enable and disable the account lockout feature using the
passwordLockout (pwdLockOut)
This attribute is defined in Directory Server.
Syntax
Integer, single-valued.
OID
2.16.840.1.113730.3.1.109

passwordMaxAge (pwdMaxAge)

Definition
Indicates the number of seconds after which user passwords will expire. To use
this attribute, you must enable password expiration using the
attribute.
This attribute is defined in Directory Server.
Syntax
Integer, single-valued.
OID
2.16.840.1.113730.3.1.97

passwordMaxFailure (pwdMaxFailure)

Definition
Indicates the number of failed bind attempts after which a user will be locked out
of the directory. By default, account lockout is disabled. You can enable account
lockout by modifying the
154 Red Hat Directory Server Schema Reference • May 2005
attribute.
passwordLockout (pwdLockOut)
passwordExp
attribute.