IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Command
Description
Manages
the
policy
controlling
the
minimum
number
of
non-alphabetic
(numeric)
characters
allowed
in
a
password.
As
the
administrator,
you
can
apply
this
policy
to
a
specific
user
or
apply
the
policy
globally
to
all
users
listed
in
the
default
registry.
The
default
setting
is
1.
policy
set
max-password-repeated-chars
{|unset}
[-user
]
policy
get
max-password-repeated-chars
[-user
]
Manages
the
policy
controlling
the
maximum
number
of
repeated
characters
allowed
in
a
password.
As
the
administrator,
you
can
apply
this
policy
to
a
specific
user
or
apply
the
policy
globally
to
all
users
listed
in
the
default
registry.
The
default
setting
is
2.
policy
set
password-spaces
{yes|no|unset}
[-user
]
policy
get
password-spaces
[-user
]
Manages
the
policy
controlling
whether
a
password
can
contain
spaces.
As
the
administrator,
you
can
apply
this
policy
to
a
specific
user
or
apply
the
policy
globally
to
all
users
listed
in
the
default
registry.
The
default
setting
is
unset.
Default
policy
parameter
values
The
following
table
lists
the
policy
parameters
and
the
default
values:
Parameter
Default
Value
min-password-length
8
min-password-alphas
4
min-password-non-alphas
1
max-password-repeated-chars
2
password-spaces
not
set
To
create
the
password
policy
behavior
found
in
earlier
releases
of
Tivoli
Access
Manager,
apply
the
unset
option
to
each
of
the
five
password
parameters
listed
above.
Valid
and
invalid
password
examples
The
following
table
illustrates
several
password
examples
and
the
policy
results
based
on
the
default
values
of
the
five
pdadmin
parameters:
Example
Result
password
Not
valid:
must
contain
at
least
one
non-alphabetic
character.
pass
Not
valid:
must
contain
at
least
8
characters.
passs1234
Not
valid:
contains
more
than
two
repeated
characters.
12345678
Not
valid:
must
contain
at
least
four
alphabetic
characters.
password3
Valid.
Chapter
5.
WebSEAL
security
policy
115