HP-UX Directory Server 8.1 schema reference

4.1.30 passwordLockoutDuration (pwdLockoutDuration)
This attribute indicates the amount of time in seconds during which users will be locked out of
the directory after an account lockout. The account lockout feature protects against hackers who
try to break into the directory by repeatedly trying to guess a user's password. The account
lockout is enabled and disabled using the passwordLockout attribute.
2.16.840.1.113730.3.1.109OID
IntegerSyntax
Single-valuedMulti- or Single-Valued
Directory ServerDefined in
4.1.31 passwordMaxAge (pwdMaxAge)
This attribute indicates the number of seconds after which user passwords will expire. To use
this attribute, password expiration must be enabled using the passwordExp attribute.
2.16.840.1.113730.3.1.97OID
IntegerSyntax
Single-valuedMulti- or Single-Valued
Directory ServerDefined in
4.1.32 passwordMaxFailure (pwdMaxFailure)
This attribute indicates the number of failed bind attempts after which a user will be locked out
of the directory. By default, account lockout is disabled. Enable account lockout by modifying
the passwordLockout attribute.
2.16.840.1.113730.3.1.106OID
IntegerSyntax
Single-valuedMulti- or Single-Valued
Directory ServerDefined in
4.1.33 passwordMinAge (pwdMinAge)
This attribute indicates the number of seconds that must pass before a user can change his
password. Use this attribute in conjunction with the passwordInHistory attribute to prevent
users from quickly cycling through passwords so that they can use their old password again. A
value of zero (0) indicates that the user can change the password immediately.
2.16.840.1.113730.3.1.222OID
IntegerSyntax
Single-valuedMulti- or Single-Valued
Directory ServerDefined in
4.1.34 passwordMinLength (pwdMinLength)
This attribute specifies the minimum number of characters that must be used in Directory Server
user password attributes. In general, shorter passwords are easier to crack, so the recommended
100 Operational attributes, special attributes, and special object classes