T.Lion password policies

The following sets the user password expiration date to 90 days (default). If set to 0, then password expiration is disabled.

userPasswordExpirationDate=90

The following ensures that the password is not identical to the previous 10 passwords (default). If set to 0, then the no-password-reuse requirement is disabled.

userPasswordHistoryLength=10

The following auto-locks users for one hour after 6 failed login attempts in a row within 3 minutes.

autoban3Attempts = 6
autoban3Timeframe = 180
autoban3Time = 3600

The following turns off user auto-lock.

autoban3Attempts = 0

Any changes to the configuration require a server restart.

restart-server