Passwordminlength (Pwdminlength); Passwordmustchange (Pwdmustchange); Passwordresetfailurecount (Pwdfailurecountinterval) - Netscape DIRECTORY SERVER 7.0 - SCHEMA Reference

Operational Attributes

passwordMinLength (pwdMinLength)

Definition
Specifies the minimum number of characters that must be used in Directory
Server user password attributes. In general, shorter passwords are easier to crack,
so you are recommended to set a password length of at least 6 or 7 characters.
This is long enough to be difficult to crack, but short enough that users can
remember the password without writing it down.
This attribute is defined in Directory Server.
Syntax
Integer, single-valued.
OID
2.16.840.1.113730.3.1.99

passwordMustChange (pwdMustChange)

Definition
Indicates whether users must change their passwords when they first bind to the
Directory Server or when the password has been reset by the Manager DN.
This attribute is defined in Directory Server.
Syntax
DirectoryString, single-valued.
OID
2.16.840.1.113730.3.1.220
passwordResetFailureCount
(pwdFailureCountInterval)
Definition
Indicates the amount of time in seconds after which the password failure counter
will be reset. Each time an invalid password is sent from the user's account, the
password failure counter is incremented. If the
attribute is set to
156 Netscape Directory Server Schema Reference • October 2004
, users will be locked out of the directory when the counter
on
passwordLockout (pwdLockOut)