The Password Policy is defined in a YAML text file. The policy to use is set with the --password-policy startup option. For example:
run server / <run-options> / --password-policy pwdpol <other-options>
In this case, PWDPOL is the name of the Password Policy YAML configuration file.
This is an example policy file:
PasswordPolicyConfig:
monitorInterval: 15 # config file monitor frequency (in seconds)
loginOptions:
maxFailures: 5 # maximum attempts before account locked
passwordOptions:
minLength: 8
maxLength: 12 # Absolute maximum is 64
special: 1 # nbr required special characters ; 0 = not required
digit: 1 # nbr required digits
upper: 1 # nbr required uppercase characters
lower: 1 # nbr required lowercase characters
firstMustBeLetter: false # first character must be alpha
version: 1
|
Element |
Value |
Notes |
|---|---|---|
|
|
How often, in seconds, to check for a change in the YAML configuration file. |
Values: Default: |
|
|
The allowed maximum number of login failures before the account is disabled (locked). Disabled accounts must be manually enabled. |
Values: Default: |
|
|
The minimum length for a password. |
Values: Default: |
|
|
The maximum length for a password. |
Values: Default: Must be greater than |
|
|
Number of required special characters. |
|
|
|
Number of required numeric digits. |
|
|
|
Number of required uppercase alphabetic characters. |
|
|
|
Number of required lowercase alphabetic characters. |
|
|
|
The first character of the password must be an uppercase or lowercase alphabetic character. |
Values: Default: |