Passwordmaxfailure (Maximum Password Failures); Passwordminage (Password Minimum Age); Passwordminlength (Password Minimum Length) - Netscape DIRECTORY SERVER 6.2 Configuration Manual

passwordMaxFailure (Maximum Password Failures)

Indicates the number of failed bind attempts after which a user will be locked out
of the directory. By default, account lockout is disabled. You can enable account
lockout by modifying the
For more information on password policies, see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.
Entry DN:
cn=config
Valid Range: 1 to maximum integer bind failures
Default Value:
3
Syntax: Integer
Example:
passwordMaxFailure: 3

passwordMinAge (Password Minimum Age)

Indicates the number of seconds that must pass before a user can change their
password. Use this attribute in conjunction with the
of Passwords to Remember) attribute to prevent users from quickly cycling
through passwords so that they can use their old password again. A value of zero
(0) indicates that the user can change the password immediately.
For more information on password policies, see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.

passwordMinLength (Password Minimum Length)

Specifies the minimum number of characters that must be used in Directory
Server user password attributes. In general, shorter passwords are easier to
crack, so you are recommended to set a password length of at least 6 or 7
characters. This is long enough to be difficult to crack, but short enough that
users can remember the password without writing it down.
For more information on password policies, see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.
Entry DN:
cn=config
Valid Range: 2 to 512 characters
Default Value:
6
attribute.
passwordLockout
Chapter 2
Core Server Configuration Attributes Reference
passwordInHistory
Core Server Configuration Reference
(Number
89