| Password attribute: | %(pwdAttribute)s |
| Minimum time between password modifications: | %(pwdMinAge)s |
| Maximum number of passwords stored in history: | %(pwdInHistory)s |
| Password quality check: | %(pwdCheckQuality)s |
| Minimum password length: | %(pwdMinLength)s |
| User (entry) is allowed to change own password: | %(pwdAllowUserChange)s |
| Old password must be sent when changing own password: | %(pwdSafeModify)s |
| Enforce password change after next bind: | %(pwdMustChange)s |
| Time after which a password is no longer valid (password expiry): | %(pwdMaxAge)s |
| Time before password expiry a warning message is returned: | %(pwdExpireWarning)s |
| Maximum number of times that an expired password may be used: | %(pwdGraceAuthnLimit)s |
| Password lockout after failed bind attempts: | %(pwdLockout)s |
| Time for password lockout: | %(pwdLockoutDuration)s |
| Number of failed bind attempts for lockout: | %(pwdMaxFailure)s |
| Time after which failed bind attempts are purged: | %(pwdFailureCountInterval)s |