Re: Newbie question: setting userPassword field

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 10:20 PM 2/7/00 -0500, Earl Robinson wrote:
>While we're on the topic of passwords and security, is there a way to
>get openldap to lock an account when someone has failed to authenticate
>x times in a row?  if so, how would you unlock, and can it just lock for
>a specified period of time? From a security standpoint, this is an
>essential feature, otherwise, you are wide open to brute-force password
>attacks.

OpenLDAP 1.x does not support password policies.  I suggest
use of SSHA (and well choosen passwords) to reduce the
feasibility of brute-force and dictionary password attacks.