Generic credential
This table lists the policy parameters specific to generic credentials.
In addition to the policy parameters defined in this table, the policy parameter defined in [the table] is also valid for generic credentials.
Name | Data Type, Values | Default | Description |
---|---|---|---|
credentialLifetime | Data type: int (>0) | 10 years in milliseconds | Lifetime of a generic credential in milliseconds. After the defined period of time, the user will no longer be able to use his generic credential. |
maxCredFailureCount | Data type: int (>0) or -1 | 3 | Maximum number of login failures before a generic credential is definitely locked. If set to "-1", the max. failure counter is disabled. |
tmpLockingDuration | Data type: long | 60000 | Duration of the temporary locking in milliseconds. Use a tmpLockingDuration of at least 30000 since the exact duration cannot be guaranteed below this value. |
tmpLockingMode | Data type: String Values: strict, threshold | strict | strict: when the first temporary locking period is over, the user can try to log in only once before the next temporary locking period activates. threshold: the user can always try "tmpLockingThreshold" times to log in before the next temporary locking period activates. |
tmpLockingThreshold | Data type: int (>0) or -1 | 2 | Number of login failures before the generic credential is temporarily locked. If set to "-1", the temporary lock is disabled. |