Passwordstoragescheme (Password Storage Scheme); Passwordunlock (Unlock Account) - Netscape DIRECTORY SERVER 6.2 Configuration Manual

passwordStorageScheme (Password Storage Scheme)

Specifies the type of encryption used to store Directory Server passwords. Enter
the password in
CLEAR
in plain text.
The following encryption types are supported by the Directory Server 6.x:
• SSHA (Salted Secure Hash Algorithm) is the recommended method as it is the
most secure.
• SHA (Secure Hash Algorithm). This is the method supported by 4.x
Directory Servers.
• CRYPT is the UNIX crypt algorithm. It is provided for compatibility with
UNIX passwords.
NOTE You can no longer choose to encrypt passwords using the
NS-MTA-MD5 password storage scheme. The storage scheme is
still present but only for reasons of backward compatibility.
For more information on password policies, see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.

passwordUnlock (Unlock Account)

Indicates whether users will be locked out of the directory for a specified amount
of time or until the administrator resets the password after an account lockout. The
account lockout feature protects against hackers who try to break into the directory
by repeatedly trying to guess a user's password. If this
is set to and the operational attribute
off
then the account will be locked indefinitely.
For more information on password policies, see Chapter 7, "User Account
Management" in the Netscape Directory Server Administrator's Guide.
Entry DN:
cn=config
Valid Values: on | off
Default Value:
on
Syntax: DirectoryString
Example:
passwordUnlock: off
for this attribute indicates that the password will appear
accountUnlockTime
Chapter 2
Core Server Configuration Attributes Reference
passwordUnlock
has a value of 0,
Core Server Configuration Reference
attribute
91