UCS 2.4 - Univention

4 Univention Directory Manager
86
The figure given here is issued as the next Samba group RID. If no setting is made, Samba manages
the RIDs itself.
Next RID
The figure given here is issued as the next RID for objects which are neither users nor groups.
Password Length
Specifies the minimum length for passwords. The user cannot set passwords shorter than this length.
Password History
To force the user to use different passwords, the recently used passwords are archived here. If an
attempt is made to use an existing password when setting a new password, this password will be
rejected. The number of passwords archived can set in this input field.
Minimum Password Age
If a minimum password age is set, the user can only reuse this password once the time period given
has expired. This can be set in seconds, minutes, hours or days.
Maximum Password Age
If a maximum password age is set, the user will be asked to change his password when the time since
the last password change exceeds the time period given here. This can be set in seconds, minutes,
hours or days.
Bad Lockout Attempts
To suppress or slow down repeated attempts at guessing passwords, a user can be blocked automat-
ically after the number of failed attempts to log in given here.
Lockout Duration Minutes
A user who has been blocked following too many failed attempts to log in will have this block lifted
after the time period given here elapses. This can be set in seconds, minutes, hours or days.
Reset Count Minutes
The counter for failed log-in attempts will be automatically reset once the time period given here
elapses. This time period is set in minutes.
User must Logon to Change Password
Selecting this checkbox requires a user to be logged on before he can change his password. If the
maximum password age has already been exceeded, the user can no longer log in and must ask
an administrator to reset the password. If the checkbox is not selected, the user can change the
password when logging in