Modify an existing password policy to meet your company's requirements.
Tip:
Keep your password policies synchronized across all PingDirectory servers and PingDirectoryProxy server instances.
To modify the configuration for any defined password policy:
Choose one of the following methods:
- Run the dsconfig tool in interactive or non-interactive mode.
- Use the administrative console.
The following example sets some of the properties presented in the previous
section for the default password policy using dsconfig
.
$ bin/dsconfig set-password-policy-prop \
--policy-name "Default Password Policy" \
--set "max-password-age:90 days" \
--set "password-expiration-warning-interval:14 days" \
--set "lockout-failure-count:3" \
--set "password-history-count:6"