Login Account Policy field descriptions

Name Description
Credential Expiration Parameters: This section displays the current expiration policy values for local passwords. Changing these parameter values affects future behavior of the system and does not affect the existing logins.
The maximum number of days a password may be used (PASS_MAX_DAYS) The values range from 1 through 99999.
The minimum number of days allowed between password changes (PASS_MIN_DAYS) The values range from 0 through 99999.
The number of days a warning is given before a password expires (PASS_WARN_AGE) The values range from 0 through 30.
The number of days after a password expires to lock the account (INACTIVE; 0 = immediate, 99999 = never) The values range from 0 through 99999.
Failed Login Response: This section displays the current active values for each failed login response parameter. Changing these values immediately affects failed login response behavior.
Enable account lock out parameters (PAM Tally) You can ignore the remaining parameters if you clear the check box.
Lock out account after the following number of unsuccessful attempts (DENY) The values range from 1 through 9.
Automatically unlock a locked account after the following number of seconds (UNLOCK_TIME) The values range from 1 through 99999.
Reset the failed attempt counter after last failed attempt (UNLOCK_RESET) Click yes to reset the failed attempt counter after last failed attempt.

Click no to leave the failed attempt counter unchanged.