Passwordlockout (Account Lockout); Passwordlockoutduration (Lockout Duration) - Netscape DIRECTORY SERVER 6.01 Configuration Manual

Core Server Configuration Attributes Reference

passwordLockout (Account Lockout)

Indicates whether users will be locked out of the directory after a given number of
failed bind attempts. By default, users will not be locked out of the directory after a
series of failed bind attempts. If you enable account lockout, you can set the
number of failed bind attempts after which the user will be locked out using the
passwordMaxFailure
For more information on password policies see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.
Entry DN
Valid Range
Default Value
Syntax
Example

passwordLockoutDuration (Lockout Duration)

Indicates the amount of time in seconds during which users will be locked out of
the directory after an account lockout. The account lockout feature protects against
hackers who try to break into the directory by repeatedly trying to guess a user's
password. You enable and disable the account lockout feature using the
passwordLockout
For more information on password policies see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.
Entry DN
Valid Range
Default Value
Syntax
Example
74 Netscape Directory Server Configuration, Command, and File Reference • January 2002
attribute.
cn=config
on | off
on
DirectoryString
passwordLockout: off
attribute.
cn=config
1 to the maximum 32 bit integer value (2147483647) in seconds
3600
Integer
passwordLockoutDuration: 3600