Contents Dochome
Sun Java(TM) System Directory Server Online Help

> # Account Lockout Tab of Data Configuration

> Use this tab to define the global account lockout policy for your directory users. Account lockout based on login failures prevents someone from repeatedly guessing a password.

> Accounts may be locked out. Select this checkbox to enable the account lockout mechanism. The directory server will track login failures and lock a user account according to the policy defined in the other fields of this tab. Clear this checkbox to allow any number of repeated login failures.

> Lockout account after X login failures. Specify the number of times a user can fail to bind before they are locked out of the directory. Valid values are 1 to 32,767 attempts.

> Reset failure count after X minutes. Specify the maximum time between login failures for them to cause a lockout. If no login failures occur for this delay, the failure count is reset to zero. Valid values are 1 to 35,791,394 minutes.

> Lockout forever. With this option, user accounts that have been locked must be reset by the administrator before users can access the directory.

> Lockout duration X minutes. Select this option to specify the length of time for which a user will be locked out because of repeated login failures. After this time has elapsed, the user will be able to login normally. Valid values are 1 to 35,791,394 minutes.

> Contents Dochome

> Copyright 2004 Sun Microsystems, Inc. All rights reserved.