Summary of default settings

Default password policy is set for all the user passwords.

The following table shows default password policy settings for user passwords.

Table 1. User password policy settings
Web Administration tool parameter	Default setting
Password policy that is enabled: `ibm-pwdPolicy`	false
Password encryption: `ibm-slapdPwEncryption`	AES256
Users must specify old password when the password is changed: `pwdSafeModify`	false
User must change password after reset: `pwdMustChange`	true
Password expiration: `pwdMaxAge`	0
Number of grace logins after expiration: `pwdGraceLoginLimit`	0
Account is locked out after a specified number of consecutive failed bind attempts: `pwdLockout`	false
Number of consecutive failed bind attempts the account is locked out: `pwdMaxFailure`	0
Minimum time between password changes: `pwdMinAge`	0
Amount of time before an account lockout expires or lockouts never expire: `pwdLockoutDuration`	0
Amount of time before an incorrect login expires or incorrect login is cleared only with correct password: `pwdFailureCountInterval`	0
Minimum number of passwords before reuse: `pwdInHistory`	0
Check password syntax: `pwdCheckSyntax`	0
Minimum length: `pwdMinLength`	0
Minimum number of alphabetic characters: `passwordMinAlphaChars`	0
Minimum number of numeric and special characters: `passwordMinOtherChars`	0
Maximum number of repeated characters: `passwordMaxRepeatedChars`	0
Maximum number of consecutive repeated characters:`passwordMaxConsecutiveRepeatedChars`	0
Minimum number of characters that must be different from the old password: `passwordMinDiffChars`	0

All users except the directory administrator, members of the administrative group and the master server DN are forced to comply with the configured user password policy. The passwords for the administrator, members of the administrative group and the master server DN never expire. The directory administrator, members of the administrative group and the master server DN have sufficient access control privileges to modify users' passwords and the user password policy. Global administration group members are subject to user password policy and have the authority to modify the user password policy settings.

The password policy for administrators, members of the administrative group and the master server DN is set in the configuration file.

Table 2. Administration Password Policy Settings
Administration password requirements	Default setting
Password policy that is enabled: `ibm-slapdConfigPwdPolicyOn`	false
Account is locked out after a specified number of consecutive failed bind attempts: `pwdLockout`	true
Maximum number of incorrect logins until password lockout: `pwdMaxFailure`	10
Amount of time before an account lockout expires or lockouts never expire: `pwdLockoutDuration`	300
Amount of time before an incorrect login expires or incorrect login is cleared only with correct password: `pwdFailureCountInterval`	0
Minimum length: `pwdMinLength`	8
Minimum number of alphabetic characters: `passwordMinAlphaChars`	2
Minimum number of numeric and special characters: `passwordMinOtherChars`	2
Maximum number of repeated characters: `passwordMaxRepeatedChars`	2
Minimum number of characters that must be different from the old password: `passwordMinDiffChars`	2

Administration password policy is set to false by default. Turning on the administration password policy, enables the other attributes with the default settings.