Contents      Dochome     
Sun Java(TM) System Directory Server Online Help



Account Lockout Tab of Data Configuration

Use this tab to define the global account lockout policy for your directory users. Account lockout based on login failures prevents someone from repeatedly guessing a password.

Accounts may be locked out. Select this checkbox to enable the account lockout mechanism. The directory server will track login failures and lock a user account according to the policy defined in the other fields of this tab. Clear this checkbox to allow any number of repeated login failures.

Lockout account after X login failures. Specify the number of times a user can fail to bind before they are locked out of the directory. Valid values are 1 to 32,767 attempts.

Reset failure count after X minutes. Specify the maximum time between login failures for them to cause a lockout. If no login failures occur for this delay, the failure count is reset to zero. Valid values are 1 to 35,791,394 minutes.

Lockout forever. With this option, user accounts that have been locked must be reset by the administrator before users can access the directory.

Lockout duration X minutes. Select this option to specify the length of time for which a user will be locked out because of repeated login failures. After this time has elapsed, the user will be able to login normally. Valid values are 1 to 35,791,394 minutes.


Contents      Dochome     
Copyright 2004 Sun Microsystems, Inc. All rights reserved.