== Password Policy ==

Implement OpenLDAP password policies. In OpenLDAP, password policies are implemented through the use of Password Policy (ppolicy) Overlay.

'''Implementing OpenLDAP Password Policies'''

//PPolicy Control Mechanisms//

ppolicy overlay provides a variety of password control mechanisms including-

- Password aging — both minimum and maximum ages
- Password quality
- Automatic account locking
- Password reuse and duplication control
- Account time-outs
- Mandatory password resets
- Acceptable password content
- Grace logins to allow the use of expired passwords for a specific time period after the expiry date.