| Name | Description |
|---|---|
| Credential Expiration Parameters: This section displays the current expiration policy values for local passwords. Changing these parameter values affects future behavior of the system. The existing logins are not affected by the change in parameter values. | |
| The maximum number of days a password may be used (PASS_MAX_DAYS) | The values range from 1 through 99999. |
| The minimum number of days allowed between password changes (PASS_MIN_DAYS) | The values range from 0 through 99999. |
| The number of days a warning is given before a password expires (PASS_WARN_AGE) | The values range from 0 through 30. |
| The number of days after a password expires to lock the account (INACTIVE; 0 = immediate, 99999 = never) | The values range from 0 through 99999. |
| Failed Login Response: This section displays the current active values for each failed login response parameter. Changing these values immediately affects failed login response behavior. | |
| Enable account lock out parameters (PAM Tally) | You can ignore the remaining parameters, if the check box is clear. |
| Lock out account after the following number of unsuccessful attempts (DENY) | The values range from 1 through 9. |
| Automatically unlock a locked account after the following number of seconds (UNLOCK_TIME) | The values range from 1 through 99999. |
| Reset the failed attempt counter after last failed attempt (UNLOCK_RESET) | Click yes to reset the failed attempt counter after last failed attempt.
Click no to leave the failed attempt counter unchanged. |