Configuring The Account Lockout Policy Using The Command Line; Table 7-2 Account Lockout Policy Attributes - Netscape DIRECTORY SERVER 6.01 - ADMINISTRATOR Administrator's Manual

Managing the Password Policy
Set the interval you want users to be locked out of the directory.
6.
Select the Lockout Forever radio button to lock users out until their passwords
have been reset by the administrator.
Set a specific lockout period by selecting the Lockout duration radio button
and entering the time (in minutes) in the text box.
When you have finished making changes to the account lockout policy, click
7.
Save.

Configuring the Account Lockout Policy Using the Command Line

This section describes the attributes you set to create an account lockout policy to
protect the passwords stored in your server. Use ldapmodify to change these
attributes in the
The following table describes the attributes you can use to configure your account
lockout policy:
Table 7-2 Account Lockout Policy Attributes
Attribute Name
passwordLockout
passwordMaxFailure
passwordLockoutDuration
264 Netscape Directory Server Administrator's Guide • January 2002
entry.
cn=config
Definition
This attribute indicates whether users are locked out of the directory after a
given number of failed bind attempts. You set the number of failed bind
attempts after which the user will be locked out using the
passwordMaxFailure attribute.
You can lock users out for a specific time or until an administrator resets
the password.
This attribute is set to off by default, meaning that users will not be locked
out of the directory.
This attribute indicates the number of failed bind attempts after which a
user will be locked out of the directory.
This attribute takes affect only if the passwordLockout attribute is set to
on.
This attribute is set to 3 bind failures by default.
This attribute indicates the time, in seconds, that users will be locked out of
the directory. You can also specify that a user is lock out until their
password is reset by an administrator using the passwordUnlock
attribute.
By default, the user is locked out for 3600 second.