To create a new password policy:
- Run dsconfig in interactive or non-interactive mode.
- Use the administrative console.
This example demonstrates creating a new policy using dsconfig
in non-interactive mode.
$ bin/dsconfig create-password-policy \
--policy-name "Demo Password Policy" \
--set "password-attribute:userpassword" \
--set "default-password-storage-scheme:Salted SHA-256" \
--set "force-change-on-add:true" \
--set "force-change-on-reset:true" \
--set "password-expiration-warning-interval:2 weeks" \
--set "max-password-age:90 days" \
--set "lockout-duration:24 hours" \
--set "lockout-failure-count:3" \
--set "password-change-requires-current-password:true"