Red Hat DIRECTORY SERVER 8.0 Command Reference Manual page 66

Chapter 2. Core Server Configuration Reference
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.106. passwordLockout (Account Lockout)
Indicates whether users are locked out of the directory after a given number of failed bind attempts.
By default, users are not locked out of the directory after a series of failed bind attempts. If account
lockout is enabled, set the number of failed bind attempts after which the user is locked out using the
passwordMaxFailure attribute.
For more information on password policies, see the "Managing Users and Passwords" chapter in the
Directory Server Administrator's Guide.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.107. passwordLockoutDuration (Lockout Duration)
Indicates the amount of time in seconds during which users are locked out of the directory after
an account lockout. The account lockout feature protects against hackers who try to break into the
directory by repeatedly trying to guess a user's password. Enable and disable the account lockout
feature using the passwordLockout attribute.
For more information on password policies, see the "Managing Users and Passwords" chapter in the
Directory Server Administrator's Guide.
Parameter
Entry DN
Valid Range
Default Value
Syntax
Example
2.3.1.108. passwordMaxAge (Password Maximum Age)
Indicates the number of seconds after which user passwords expire. To use this attribute, password
expiration has to be enabled using the passwordExp attribute.
56
Description
cn=config
on | off
off
DirectoryString
passwordIsGlobalPolicy: off
Description
cn=config
on | off
on
DirectoryString
passwordLockout: off
Description
cn=config
1 to the maximum 32 bit integer value
(2147483647) in seconds
3600
Integer
passwordLockoutDuration: 3600