<h2>Password policy</h2>

<fieldset>
  <legend>Password change parameters</legend>
  <table>
    <tr>
      <td>Password attribute (pwdAttribute):</td>
      <td>%(pwdAttribute)s</td>
    </tr>
    <tr>
      <td>Minimum time between password modifications (pwdMinAge):</td>
      <td>%(pwdMinAge)s</td>
    </tr>
    <tr>
      <td>Maximum number of passwords stored in history (pwdInHistory):</td>
      <td>%(pwdInHistory)s</td>
    </tr>
    <tr>
      <td>Password quality check (pwdCheckQuality):</td>
      <td>%(pwdCheckQuality)s</td>
    </tr>
    <tr>
      <td>Minimum password length (pwdMinLength):</td>
      <td>%(pwdMinLength)s</td>
    </tr>
    <tr>
      <td>User (entry) is allowed to change own password (pwdAllowUserChange):</td>
      <td>%(pwdAllowUserChange)s</td>
    </tr>
    <tr>
      <td>Old password must be sent when changing own password (pwdSafeModify):</td>
      <td>%(pwdSafeModify)s</td>
    </tr>
    <tr>
      <td>Enforce password change after next bind (pwdMustChange):</td>
      <td>%(pwdMustChange)s</td>
    </tr>
  </table>
</fieldset>

<fieldset>
  <legend>Password expiry</legend>
  <table>
    <tr>
      <td>Time after which a password is no longer valid (pwdMaxAge):</td>
      <td>%(pwdMaxAge)s</td>
    </tr>
    <tr>
      <td>Time before password expiry a warning message is returned (pwdExpireWarning):</td>
      <td>%(pwdExpireWarning)s</td>
    </tr>
    <tr>
      <td>Maximum number of times that an expired password may be used (pwdGraceAuthnLimit):</td>
      <td>%(pwdGraceAuthnLimit)s</td>
    </tr>
  </table>
</fieldset>

<fieldset>
  <legend>Lockout parameters</legend>
  <strong>You should think twice whether you really want to lock out users!</strong>
  <table>
    <tr>
      <td>Password lockout after failed bind attempts (pwdLockout):</td>
      <td>%(pwdLockout)s</td>
    </tr>
    <tr>
      <td>Time for password lockout (pwdLockoutDuration):</td>
      <td>%(pwdLockoutDuration)s</td>
    </tr>
    <tr>
      <td>Number of failed bind attempts for lockout (pwdMaxFailure):</td>
      <td>%(pwdMaxFailure)s</td>
    </tr>
    <tr>
      <td>Time after which failed bind attempts are purged (pwdFailureCountInterval):</td>
      <td>%(pwdFailureCountInterval)s</td>
    </tr>
    <tr>
      <td>Number of failed attempts stored (pwdMaxRecordedFailure):</td>
      <td>%(pwdMaxRecordedFailure)s</td>
    </tr>
  </table>
</fieldset>
