Overview#

PwdMaxDelay attribute specifies the maximum number of seconds to delay when responding to a failed authentication attempt.

The time specified in pwdMinDelay is used as the starting time and is then doubled on each failure until the delay time is greater than or equal to PwdMaxDelay or a successful authentication occurs, which resets the failure counter.

pwdMinDelay must be specified if PwdMaxDelay is set.

The PwdMaxDelay AttributeTypes is defined as:

• OID of 1.3.6.1.4.1.42.2.27.8.1.25
• NAME: PwdMaxDelay
• DESC: specifies the maximum number of seconds to delay when responding to a failed authentication attempt.
• EQUALITY: integerMatch
• SYNTAX: 1.3.6.1.4.1.1466.115.121.1.27
• SINGLE-VALUE!! More Information

There might be more information for this subject on one of the following:

• Draft-behera-ldap-password-policy
• PwdMinDelay
• PwdPolicy