Overview #

Description of Attribute Usage For PwdFailureTime#

This attribute holds the timestamps of the consecutive authentication failures as defined in the Draft-behera-ldap-password-policy.

Attribute Definition#

The PwdFailureTime AttributeTypes is defined as:

• OID of 1.3.6.1.4.1.42.2.27.8.1.19
• NAME: PwdFailureTime
• DESC:
• EQUALITY: generalizedTimeMatch
• ORDERING: generalizedTimeOrderingMatch
• SYNTAX: 1.3.6.1.4.1.1466.115.121.1.24 Generalized Time
• SINGLE-VALUE
• NO-USER-MODIFICATION
• USAGE DirectoryOperation

Intruder Lockout Check#

While performing the Intruder Lockout Check, values of PwdFailureTime that are old by more than PwdFailureCountInterval are purged and not counted.

USED AS OPTIONAL IN: #

• ndsLoginProperties
• nspmPasswordAux

More Information #

There might be more information for this subject on one of the following:

• 1.3.6.1.4.1.42.2.27.8.1.19
• 2.16.840.1.113719.1.1.6.1.33
• Draft-behera-ldap-password-policy
• DxPwdFailedTime
• Edirectory Indexes
• Intruder Lockout Check
• Locked By Intruder
• NdsLoginProperties
• NspmPasswordAux
• Password Policy State Information