Syntax for password strength policy commands

The pdadmin policy commands, used to set password strength policy, are appropriate for use only with an LDAP type of user registry. The unset option disables this policy attribute; that is, the policy is not enforced.

policy set min-password-length {number|unset} [-user username]

policy get min-password-length [-user username]

Manages the policy that controls the minimum length of a password.

As the administrator, you can apply this policy to a specific user or apply the policy globally to all users listed in the default registry.

The default setting is 8.

policy set min-password-alphas {number|unset} [-user username]

policy get min-password-alphas [-user username]

Manages the policy controlling the minimum number of alphabetic characters allowed in a password.

As the administrator, we can apply this policy to a specific user or apply the policy globally to all users listed in the default registry.

The default setting is 4.

policy set min-password-non-alphas {number|unset} [-user username]

policy get min-password-non-alphas [-user username]

Manages the policy controlling the minimum number of non-alphabetic (numeric) characters allowed in a password.

As the administrator, we can apply this policy to a specific user or apply the policy globally to all users listed in the default registry.

The default setting is 1.

policy set max-password-repeated-chars {number|unset} [-user username]

policy get max-password-repeated-chars [-user username]

Manages the policy controlling the maximum number of repeated characters allowed in a password.

As the administrator, we can apply this policy to a specific user or apply the policy globally to all users listed in the default registry.

The default setting is 2.

policy set password-spaces {yes|no|unset} [-user username]

policy get password-spaces [-user username]

Manages the policy controlling Whether a password can contain spaces.

As the administrator, we can apply this policy to a specific user or apply the policy globally to all users listed in the default registry.

The default setting is unset.

Parent topic: Password strength policy