Core Server Configuration Attributes Reference
Chapter 2 Core Server Configuration Reference 89
passwordMustChange (Password Must Change)
Indicates whether users must change their passwords when they first bind to the
Directory Server or when the password has been reset by the Manager DN.
For more information on password policies, see chapter 7, “User Account
Management,” in the Red Hat Directory Server Administrator’s Guide.
passwordResetFailureCount (Reset Password Failure Count After)
Indicates the amount of time in seconds after which the password failure counter
will be reset. Each time an invalid password is sent from the user’s account, the
password failure counter is incremented. If the
passwordLockout
attribute is set
to
on
, users will be locked out of the directory when the counter reaches the
number of failures specified by the
passwordMaxFailure
attribute (within
600
seconds by default). After the amount of time specified by the
passwordLockoutDuration
attribute, the failure counter is reset to zero (
0
).
For more information on password policies, see chapter 7, “User Account
Management,” in the Red Hat Directory Server Administrator’s Guide.
Entry DN: cn=config
Valid Range: 2 to 512 characters
Default Value: 6
Syntax: Integer
Example: passwordMinLength: 6
Entry DN: cn=config
Valid Values: on | off
Default Value: off
Syntax: DirectoryString
Example: passwordMustChange: off
Entry DN: cn=config
Valid Range: 1 to the maximum 32 bit integer value (2147483647) in seconds