Red Hat DIRECTORY SERVER 7.1 - SCHEMA Reference page 174

Special Object Classes
This object class is defined in Directory Server.
Superior Class
top
OID
2.16.840.1.113730.3.2.12
Required Attributes
objectClass
Allowed Attributes
accountUnlockTime
passwordAllowChangeTime
passwordExpirationTime
passwordExpWarned
passwordGraceUserTime
passwordHistory
passwordRetryCount
pwdpolicysubentry
retryCountResetTime
174 Red Hat Directory Server Schema Reference • May 2005
Defines the object classes for the entry.
Refers to the amount of time that must pass after an
account lockout before the user can bind to the directory
again.
Used to specify the length of time that must pass before
users are allowed to change their passwords.
Used to specify the length of time that passes before the
user's password expires.
Used to indicate that a password expiration warning has
been sent to the user.
Used to specify the number of login attempts that are
allowed to a user after the password has expired.
Contains the history of the user's previous passwords.
Used to count the number of consecutive failed attempts
at entering the correct password.
Points to the entry DN of the new password policy.
Specifies the length of time that passes before the
passwordRetryCount attribute is reset.