UCS 2.4 - Univention

4 Univention Directory Manager
124
’[Passwords]’ tab
Intervals for change or expiry of passwords can be specified on this tab.
History length
The number of passwords stored for the user. The user may not utilise any of these passwords as
a new password. Example: If the number 3 is entered in this field, the last three passwords will be
barred from being accepted as new passwords.
Attention:
The passwords are not stored retroactively. Example: If ten passwords were stored, and the value
is reduced to three, the oldest seven passwords will be deleted during the next password change. If
then the value is increased again, the number of stored passwords initially remains at three, and is
only increased by each password change.
Password expiry interval
The interval (in days) after which the user has to change his password.
Password quality check
If this option is activated, additional checks - including dictionary checks - are performed for pass-
word changes in Samba, Univention Directory Manager and Kerberos. The configuration is done via
Univention Configuration Registry and should occur on all login servers. The following checks can be
enforced:
• Minimum number of digits in the new password (password/quality/credit/digits).
• Minimum number of uppercase letters in the new password (password/quality/credit/upper).
• Minimum number of lowercase letters in the new password (password/quality/credit/lower).
• Minimum number of characters in the new password which are neither letters nor digits
(password/quality/credit/other).
• Individual characters/digits can be excluded (password/quality/forbidden/chars).
• Individual characters/figures can be made compulsory (password/quality/required/chars).
Password length
The minimum number of characters of which a user password is to consist. If no value is entered
here, the minimum size is eight characters.
Attention:
The default value of eight characters for password length is fixed in Univention Directory Manager, so
it always applies if no policy is set and the checkbox Override password length is not ticked. This
means it even applies if the default settings password policy were deleted.