Password Policy

Implement OpenLDAP password policies. In OpenLDAP, password policies are implemented through the use of Password Policy (ppolicy) Overlay.

Implementing OpenLDAP Password Policies

PPolicy Control Mechanisms

ppolicy overlay provides a variety of password control mechanisms including-

• Password aging — both minimum and maximum ages
• Password quality
• Automatic account locking
• Password reuse and duplication control
• Account time-outs
• Mandatory password resets
• Acceptable password content
• Grace logins to allow the use of expired passwords for a specific time period after the expiry date.