Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 77

Parameter
Syntax
Example
2.3.1.126. passwordMaxFailure (Maximum Password Failures)
Indicates the number of failed bind attempts after which a user is locked out of the directory. By
default, account lockout is disabled. Enable account lockout by modifying the passwordLockout
attribute.
This can be abbreviated to pwdMaxFailure.
For more information on password policies, see the "Managing Users and Passwords" chapter in the
Directory Server Administrator's Guide.
Parameter
Entry DN
Valid Range
Default Value
Syntax
Example
2.3.1.127. passwordMaxRepeats (Password Syntax)
Maximum number of times the same character can appear sequentially in the password. Zero (0) is
off. Integer values reject any password which used a character more than that number of times; for
example, 1 rejects characters that are used more than once (aa) and 2 rejects characters used more
than twice (aaa).
Parameter
Entry DN
Valid Range
Default Value
Syntax
Example
2.3.1.128. passwordMin8Bit (Password Syntax)
This sets the minimum number of 8-bit characters the password must contain.
NOTE
The 7-bit checking for userPassword must be disabled to use this.
Parameter
Entry DN
Description
Integer
passwordMaxAge: 100
Description
cn=config
1 to maximum integer bind failures
3
Integer
passwordMaxFailure: 3
Description
cn=config
0 to 64
0
Integer
passwordMaxRepeats: 1
Description
cn=config
cn=config
63