Passwordinhistory (Number Of Passwords To Remember); Passwordlockout (Account Lockout) - Netscape DIRECTORY SERVER 7.0 Configuration Manual

passwordInHistory (Number of Passwords to Remember)

Indicates the number of passwords the Directory Server stores in history.
Passwords that are stored in history cannot be reused by users. By default, the
password history feature is disabled, meaning that the Directory Server does not
store any old passwords, and, so, users can reuse passwords. You can enable
password history by using the
To prevent users from rapidly cycling through the number of passwords that you
are tracking, use the
passwordMinAge
For more information on password policies, see chapter 7, "User Account
Management," in the Netscape Directory Server Administrator's Guide.
Entry DN:
cn=config
Valid Range: 2 to 24 passwords
Default Value:
6
Syntax: Integer
Example:
passwordInHistory: 7

passwordLockout (Account Lockout)

Indicates whether users will be locked out of the directory after a given number of
failed bind attempts. By default, users will not be locked out of the directory after a
series of failed bind attempts. If you enable account lockout, you can set the
number of failed bind attempts after which the user will be locked out using the
passwordMaxFailure
For more information on password policies, see chapter 7, "User Account
Management," in the Netscape Directory Server Administrator's Guide.
Entry DN:
cn=config
Valid Values:
on | off
Default Value:
on
Syntax: DirectoryString
Example:
passwordLockout: off
passwordHistory
attribute.
attribute.
Chapter 2
Core Server Configuration Attributes Reference
attribute.
Core Server Configuration Reference 87