Overview#

LoginGraceRemaining has an OID of 2.16.840.1.113719.1.1.4.1.43 and is the number of time an entry may login to EDirectory following the passwordExpirationTime value.

Edirectory Password Policy#

Various effects of LoginGraceRemaining values on the Edirectory Password Policy

• no value - there are effectively "unlimited" Grace Logins.
• LoginGraceRemaining=0 - There are no Grace Logins.

eDirectory LDAP Entry#

Various effects of LoginGraceRemaining values on the eDirectory LDAP Entry:

• no value
  • Assuming there is a value for LoginGraceRemaining on the Edirectory Password Policy, the value will be set to that value.
  • no value on value for LoginGraceRemaining on the Edirectory Password Policy, there are effectively "unlimited" Grace Logins.
• 0 - No Grace Logins.
• # - The number of Grace Logins that remain beyond the Password Expiration

More Information#

There might be more information for this subject on one of the following:

• 2.16.840.1.113719.1.1.4.1.43
• 2.16.840.1.113719.1.1.6.1.33
• 2.16.840.1.113719.1.39.43.6.4
• EDirectory Password Expiration
• Grace Logins
• InetOrgPerson
• NdsLoginProperties
• NspmPasswordAux