Front cover - IBM Redbooks

Figure 11-15 Denial of access to an expired password dialog box
In R5 and in version 6, the Grace Period is defined as the time after the
password has expired, but where the user is able to change their password
before the account is locked out (The user will not be able to log into a server that
is enabled for password checking during the Grace Period). In pre R4.6.7 clients
the Grace Period is an extension of the password expiration change date; the
user is still be able to access the servers but will receive stronger warnings as
time passes until their account is finally locked out at the end of the Grace
Period.
User ID lockout
The grace period for the user in our on-going example is currently set to 30 days.
Assuming the user is using either an R5 or version 6 client, that gives the user a
30 day time slot in which they must change the password in the Notes user ID file
being used, if they wish to re-access any of the servers set up to enforce
password checking. After this 30 day Grace Period expires, the administrator of
the server will need to get involved and manually reset the user's account by
modifying the Person document for this user. A 30 day slot seems quite
adequate since, should the password expire just as the user goes on vacation,
by the time the user returns, that person will be able to change the password and
continue working without any need for the administrator's assistance.
However, users being users, if that person decides to ignore the password
change warnings, then the next time the user tries to access the server, they will
see a new warning, which is the dialog box shown in Figure 11-16 on page 490.
Chapter 11. Domino/Notes 6 security features 489