Overview#

PwdLockoutDuration attribute holds the number of seconds that the password cannot be used to authenticate due to too many failed bind attempts.

If this attribute is not present, or if the value is 0 the password cannot be used to authenticate until reset by a password administrator.

The PwdLockoutDuration AttributeTypes is defined as:

• OID of 1.3.6.1.4.1.42.2.27.8.1.10
• NAME: PwdLockoutDuration
• DESC: holds the number of seconds that the password cannot be used to authenticate due to too many failed bind attempts.
• EQUALITY: integerMatch
• SYNTAX: 1.3.6.1.4.1.1466.115.121.1.27
• SINGLE-VALUE!! More Information

There might be more information for this subject on one of the following:

• Draft-behera-ldap-password-policy
• Locked Account Check
• PwdPolicy
• SCIM Password Management Extension