Passwordunlock (Unlock Account); Passwordwarning (Send Warning) - Netscape DIRECTORY SERVER 6.01 Configuration Manual

Core Server Configuration Attributes Reference
For more information on password policies see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.

passwordUnlock (Unlock Account)

Indicates whether users will be locked out of the directory for a specified amount
of time or until the administrator resets the password after an account lockout. The
account lockout feature protects against hackers who try to break into the directory
by repeatedly trying to guess a user's password. If this
is set to
then the account will be locked indefinitely.
For more information on password policies see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.
Entry DN
Valid Range
Default Value
Syntax
Example

passwordWarning (Send Warning)

Indicates the number of seconds before a user's password is due to expire that the
user will receive a password expiration warning control on their next LDAP
operation. Depending on the LDAP client, the user may also be prompted to
change their password at the time the warning is sent.
For more information on password policies see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.
Entry DN
Valid Range
Default Value
Syntax
Example
78 Netscape Directory Server Configuration, Command, and File Reference • January 2002
and the operational attribute
off
cn=config
on | off
on
DirectoryString
passwordUnlock: off
cn=config
1 to the maximum 32 bit integer value (2147483647) in seconds
86400 (1 day)
Integer
passwordWarning: 86400
passwordUnlock
accountUnlockTime
attribute
has a value of 0,