Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 76

Chapter 2. Core Server Configuration Reference
lockout is enabled, set the number of failed bind attempts after which the user is locked out using the
passwordMaxFailure attribute.
This can be abbreviated to pwdLockOut.
For more information on password policies, see the "Managing Users and Passwords" chapter in the
Directory Server Administrator's Guide.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.124. passwordLockoutDuration (Lockout Duration)
Indicates the amount of time in seconds during which users are locked out of the directory after
an account lockout. The account lockout feature protects against hackers who try to break into the
directory by repeatedly trying to guess a user's password. Enable and disable the account lockout
feature using the passwordLockout attribute.
This can be abbreviated to pwdLockoutDuration.
For more information on password policies, see the "Managing Users and Passwords" chapter in the
Directory Server Administrator's Guide.
Parameter
Entry DN
Valid Range
Default Value
Syntax
Example
2.3.1.125. passwordMaxAge (Password Maximum Age)
Indicates the number of seconds after which user passwords expire. To use this attribute, password
expiration has to be enabled using the passwordExp attribute.
This can be abbreviated to pwdMaxAge.
For more information on password policies, see the "Managing Users and Passwords" chapter in the
Directory Server Administrator's Guide.
Parameter
Entry DN
Valid Range
Default Value
62
Description
cn=config
on | off
on
DirectoryString
passwordLockout: off
Description
cn=config
1 to the maximum 32 bit integer value
(2147483647) in seconds
3600
Integer
passwordLockoutDuration: 3600
Description
cn=config
1 to the maximum 32 bit integer value
(2147483647) in seconds
8640000 (100 days)