Password Restrictions

Use this page to set login password requirements for this object in eDirectory™.

NOTE: The legacy password settings on this page are overridden by any Password Policy associated with the user object. If you make changes to these password restrictions and they do not take effect, look for a Password Policy and modify the password restrictions there.

Allow User to Change Password
Specifies whether this object is allowed to change its login password. The setting of this check box is stored in the Password Allow Change property of this object.

Require a Password
Specifies whether to prompt for a password during login. To cause this object to be prompted for a password, select this check box and specify the minimum number of characters required for the password in the Minimum Password Length field. You can specify a number from 1 to 128 or accept the default of 5. The setting of this check box is stored in the Password Required property of this object, and the minimum password length is stored in the Password Minimum Length property of this object.

Force Periodic Password Changes
Specifies whether to prompt this object to change its login password periodically. To cause the object to be prompted, select this check box and fill in the next two fields.

Days between Forced Changes
Specifies the number of days this object is allowed to use a password before it expires. You can specify a number from 1 to 365. The setting of the Force Periodic Password Changes check box and the contents of this field are stored in the Password Expiration Interval property of this object.

Date Password Expires
Specifies the date and time this object's current password expires. The year field only accepts values up to 2037.

After this object changes its password, and each time it changes the password thereafter, the system resets the expiration date forward the number of days specified in the Days Between Forced Changes field. The expiration date is stored in the Password Expiration Time property of this object.

Require Unique Passwords
Specifies whether to prevent this object from reusing any of its last eight login passwords. The setting of this check box is stored in the Password Unique Required property of this object.

Limit Grace Logins
Specifies whether to limit the number of grace logins this object is allowed. A grace login means the object can log in with an expired password. To limit the number of grace logins, select this check box and fill in the next two fields.

Grace Logins Allowed
Specifies the number of grace logins this object is allowed. You can specify a number from 0 to 200 or accept the default of 6. The setting of the Limit Grace Logins check box and the contents of this field are stored in the Login Grace Limit property of this object.

Remaining Grace Logins
Specifies the number of grace logins this object has left. Each time the object uses a grace login, the system decrements this value. Each time the object changes its login password, the system resets this value to the number of grace logins allowed. If the object has exhausted its grace logins and you want to grant a few more grace logins (this time only), or if you want to set a different number of grace logins for the next time the login password expires, specify a number in this field. The number of grace logins remaining is stored in the Login Grace Remaining property of this object.

Set Password
Use the Set Password dialog box to change your password. The Object Name field is already populated. Type your new password twice.
Click Set Simple Password if you want to enable native file access for Windows* and Macintosh* users. This is not required when Universal Password is enabled.

NOTE: If the user is assigned any Universal Password policy, then the universal password can be set by using the Set Universal Password task under the Passwords role. If the Passwords role is not available, you can make it available by installing either the Novell Identity Manager - Password Management plug-in or the Novell iManager Password Management plug-in.

A trademark symbol (^®, ^™, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For more information, see Legal Notices.