Overview#

PwdPolicy ObjectClass Type contains the attributes defining a password policy in effect for a set of users. Section 10 of draft-behera-ldap-password-policy describes the administration of this object, and the relationship between it and particular objects.

The ObjectClass Type is defined as:

• OID: 1.3.6.1.4.1.42.2.27.8.2.1
• NAME: PwdPolicy
• SUP: top
• AUXILIARY
• MUST:
  • pwdAttribute
• MAY:
  • pwdMinAge
  • pwdMaxAge
  • pwdInHistory
  • pwdCheckQuality
  • pwdMinLength
  • pwdMaxLength
  • pwdExpireWarning
  • pwdGraceAuthNLimit
  • pwdGraceExpiry
  • pwdLockout
  • pwdLockoutDuration
  • pwdMaxFailure
  • pwdFailureCountInterval
  • pwdMustChange
  • pwdAllowUserChange
  • pwdSafeModify
  • pwdMinDelay
  • pwdMaxDelay
  • pwdMaxIdle

More Information#

There might be more information for this subject on one of the following:

• Draft-behera-ldap-password-policy
• Locked Account Check
• Password Policy State Attribute
• PwdExpireWarning