Red Hat 8.1, Command Reference Manual

Page: 78 / 372

Chapter 2. Core Server Configuration Reference
64
Parameter Description
Valid Range 0 to 64
Default Value 0
Syntax Integer
Example passwordMin8Bit: 0
2.3.1.129. passwordMinAge (Password Minimum Age)
Indicates the number of seconds that must pass before a user can change their password. Use this
attribute in conjunction with the
passwordInHistory
(number of passwords to remember) attribute
to prevent users from quickly cycling through passwords so that they can use their old password
again. A value of zero (
0
) means that the user can change the password immediately.
This can be abbreviated to
pwdMaxFailure
.
For more information on password policies, see the "Managing Users and Passwords" chapter in the
Directory Server Administrator's Guide
.
Parameter Description
Entry DN cn=config
Valid Range 0 to valid maximum integer
Default Value 0
Syntax Integer
Example passwordMinAge: 150
2.3.1.130. passwordMinAlphas (Password Syntax)
This attribute sets the minimum number of alphabetic characters password must contain.
Parameter Description
Entry DN cn=config
Valid Range 0 to 64
Default Value 0
Syntax Integer
Example passwordMinAlphas: 4
2.3.1.131. passwordMinCategories (Password Syntax)
This sets the minimum number of character categories that are represented in the password. The
categories are lower, upper, digit, special, and 8-bit. For example, if the value of this attribute were
set to
2
, and the user tried to change the password to
aaaaa
, the server would reject the password
because it contains only lower case characters, and therefore contains characters from only one
category. A password of
aAaAaA
would pass because it contains characters from two categories,
uppercase and lowercase. The default is
3
, which means that if password syntax checking is enabled,
valid passwords have to have three categories of characters.
Parameter Description
Entry DN cn=config