Sun Java(TM) System Directory Server Online Help |
Lockout Tab of the Password Policy Dialog
This screen defines the account lockout policy for your directory users. Account lockout based on login failures prevents someone from repeatedly guessing a password.
Accounts may be locked out. Select this checkbox to enable the account lockout mechanism. The directory server will track login failures and lock a user account according to the policy defined in the other fields of this tab. Clear this checkbox to allow any number of repeated login failures.
Lockout account after X login failures. Specify the number of times a user can fail to bind before they are locked out of the directory. Valid values are 1 to 32,767 attempts.
Reset failure count after X minutes. Specify the maximum time between login failures for them to cause a lockout. If no login failures occur for this delay, the failure count is reset to zero. Valid values are 1 to 35,791,394 minutes.
Lockout forever. With this option, user accounts that have been locked must be reset by the administrator before users can access the directory.
Lockout duration X minutes. Select this option to specify the length of time for which a user will be locked out because of repeated login failures. After this time has elapsed, the user will be able to log in normally. Valid values are 1 to 35,791,394 minutes.