Password policy

Password change parameters
Password attribute: %(pwdAttribute)s
Minimum time between password modifications: %(pwdMinAge)s
Maximum number of passwords stored in history: %(pwdInHistory)s
Password quality check: %(pwdCheckQuality)s
Minimum password length: %(pwdMinLength)s
User (entry) is allowed to change own password: %(pwdAllowUserChange)s
Old password must be sent when changing own password: %(pwdSafeModify)s
Enforce password change after next bind: %(pwdMustChange)s
Password expiry
Time after which a password is no longer valid (password expiry): %(pwdMaxAge)s
Time before password expiry a warning message is returned: %(pwdExpireWarning)s
Maximum number of times that an expired password may be used: %(pwdGraceAuthnLimit)s
Lockout parameters You should think twice whether you really want to lock out users!
Password lockout after failed bind attempts: %(pwdLockout)s
Time for password lockout: %(pwdLockoutDuration)s
Number of failed bind attempts for lockout: %(pwdMaxFailure)s
Time after which failed bind attempts are purged: %(pwdFailureCountInterval)s