@techreport{behera-ldap-password-policy-11, number = {draft-behera-ldap-password-policy-11}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-behera-ldap-password-policy/11/}, author = {Jim Sermersheim and Ludovic Poitou and Howard Chu and Ondřej Kuzník}, title = {{Password Policy for LDAP Directories}}, pagetotal = 42, year = 2022, month = feb, day = 22, abstract = {Password policy as described in this document is a set of rules that controls how passwords are used and administered in Lightweight Directory Access Protocol (LDAP) based directories. In order to improve the security of LDAP directories and make it difficult for password cracking programs to break into directories, it is desirable to enforce a set of rules on password usage. These rules are made to ensure that users change their passwords periodically, passwords meet construction requirements, the re-use of old password is restricted, and to deter password guessing attacks.}, }