Passwordstoragescheme (Password Storage Scheme); Passwordunlock (Unlock Account) - Netscape DIRECTORY SERVER 7.0 Configuration Manual

Default Value:
600
Syntax: Integer
Example:
passwordResetFailureCount: 600

passwordStorageScheme (Password Storage Scheme)

Specifies the type of encryption used to store Directory Server passwords. Enter the
password in for this attribute, which indicates that the password will
CLEAR
appear in plain text.
The following encryption types are supported by the Directory Server:
• SSHA (Salted Secure Hash Algorithm) is the recommended method as it is the
most secure.
• SHA (Secure Hash Algorithm). This is the method is included on for backward
compatibility with 4.x Directory Servers; do not use this algorithm.
• CRYPT is the UNIX crypt algorithm. It is provided for compatibility with
UNIX passwords.
NOTE You can no longer choose to encrypt passwords using the
NS-MTA-MD5 password storage scheme. The storage scheme is
still present but only for reasons of backward compatibility.
For more information on password policies, see chapter 7, "User Account
Management," in the Netscape Directory Server Administrator's Guide.

passwordUnlock (Unlock Account)

Indicates whether users will be locked out of the directory for a specified amount
of time or until the administrator resets the password after an account lockout. The
account lockout feature protects against hackers who try to break into the directory
by repeatedly trying to guess a user's password. If this
is set to and the operational attribute
off
then the account will be locked indefinitely.
For more information on password policies, see chapter 7, "User Account
Management," in the Netscape Directory Server Administrator's Guide.
Entry DN:
cn=config
Core Server Configuration Attributes Reference
passwordUnlock
accountUnlockTime
Chapter 2 Core Server Configuration Reference
attribute
has a value of ,
0
91