Table of Contents
Advertisement
Managing the Password Policy
Set the interval you want users to be locked out of the directory.
6.
Select the Lockout Forever radio button to lock users out until their passwords
have been reset by the administrator.
Set a specific lockout period by selecting the Lockout duration radio button
and entering the time (in minutes) in the text box.
When you have finished making changes to the account lockout policy, click
7.
Save.
Configuring the Account Lockout Policy Using the Command Line
This section describes the attributes you set to create an account lockout policy to
protect the passwords stored in your server. Use ldapmodify to change these
attributes in the
Table 7-2 describes the attributes you can use to configure your account lockout
policy.
Table 7-2
Account Lockout Policy Attributes
Attribute Name
passwordLockout
passwordMaxFailure
passwordLockoutDuration
266
Netscape Directory Server Administrator's Guide • May 2002
entry.
cn=config
Definition
This attribute indicates whether users are locked out of the directory
after a given number of failed bind attempts. You set the number of
failed bind attempts after which the user will be locked out using the
passwordMaxFailure attribute.
You can lock users out for a specific time or until an administrator
resets the password.
This attribute is set to off by default, meaning that users will not be
locked out of the directory.
This attribute indicates the number of failed bind attempts after which
a user will be locked out of the directory.
This attribute takes affect only if the passwordLockout attribute is
set to on.
This attribute is set to 3 bind failures by default.
This attribute indicates the time, in seconds, that users will be locked
out of the directory. You can also specify that a user is lock out until
their password is reset by an administrator using the
passwordUnlock attribute.
By default, the user is locked out for 3600 second.
Advertisement
Table of Contents
