Tip:

Keep your password policies synchronized across all servers and server instances.

To modify the configuration for any defined password policy:

  • Choose one of the following methods:
    • Run the dsconfig tool in interactive or non-interactive mode.
    • Use the administrative console.

    The following example sets some of the properties presented in the previous section for the default password policy using dsconfig.

    $ bin/dsconfig set-password-policy-prop \ 
  --policy-name "Default Password Policy" \ 
  --set "max-password-age:90 days" \ 
  --set "password-expiration-warning-interval:14 days" \ 
  --set "lockout-failure-count:3" \
  --set "password-history-count:6"