====== Lookup Password ======

The "**Password**" class of Lookup settings allows the definition of what comprises a valid user password. A number of password rules can be configured to match the local policies. These rules will be used to validate the password users can set on their //local// NetYCE account. They have no bearing on the password used when the accounts are managed by Ldap or Active Directory.

The password settings are available for 'manager' level NetYCE users using the [[menu:admin:settings:settings|Admin - Lookup]] menu under the 'Password' class.

=== Consec ===
<WRAP>
<code>
<= 2
</code>
no more than 2 identical consecutive characters
</WRAP>

=== Default_age ===
<WRAP>
<code>
60
</code>
The default password expiry age
</WRAP>

=== Grace_logins ===
<WRAP>
<code>
2
</code>
The number of logins allowed when password is expired
</WRAP>

=== History ===
<WRAP>
<code>
12
</code>
Check new password against history for repetitions. Set history to 12
</WRAP>

=== Lower ===
<WRAP>
<code>
>= 1
</code>
at least 1 lowercase character
</WRAP>

=== MaxChars ===
<WRAP>
<code>
<= 20
</code>
no more than 20 chars
</WRAP>

=== MinChars ===
<WRAP>
<code>
>= 8
</code>
at least 8 characters
</WRAP>

=== MonthEnd ===
<WRAP>
<code>
<= 12
</code>
no trailing month numbers allowed ([0]1-12)
</WRAP>

=== MonthStart ===
<WRAP>
<code>
<= 12
</code>
no leading month numbers allowed ([0]1-12)
</WRAP>

=== Numbers ===
<WRAP>
<code>
>= 1
</code>
at least 1 digit
</WRAP>

=== Realm ===
<WRAP>
<code>
CRC
</code>
The Realm value is used in calculating the MD5. If a change is desired, it should be done before creating the users.
Calculates MD5 from: <user-id>:<realm>:<new-passwd>
</WRAP>

=== Spaces ===
<WRAP>
<code>
<= 3
</code>
no spaces allowed
</WRAP>

=== Special ===
<WRAP>
<code>
>= 0
</code>
at least 1 special char
</WRAP>

=== Unique ===
<WRAP>
<code>
>= 5
</code>
at least 5 unique characters
</WRAP>

=== Upper ===
<WRAP>
<code>
>= 1
</code>
at least 1 uppercase character
</WRAP>

=== Warn_age ===
<WRAP>
<code>
7
</code>
The number of days to warn before the password will expire
</WRAP>