Reference Guide › Registry Entries › The CA Access Control Registry › passwd

passwd

CA Access Control maintains password settings it uses under the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\passwd

The passwd registry key contains the following registry entries:

DefaultPgroup

Internal use only.

Default: other

Dictionary

Defines the full pathname of the file containing the words that cannot be used as passwords.

Note: To use this file, you must set the dictionary format password rule (use_dbdict) to file and set UseDict setting to yes. If the dictionary format is set to db, passwords that cannot be used are taken from the CA Access Control database and this setting is ignored.

Default: ACInstallDir\data\words

EnforceViaEtrust

Specifies whether to enforce updating or creating users' passwords through CA Access Control only.

Default: 0 (do not have to use CA Access Control)

PasswordTimeOut

Defines the maximum number of milliseconds that the CA Access Control password filter waits for authorization response.

Default: 4000

PasswordTimeOutAnswer

Specifies the answer to send back to the LSA if the authorization process does not respond in the time-out given.

If you set this to 0, the password change is refused. If you set this to 1, the password change is approved.

Default: 0

UseDict

Specifies whether to use the dictionary file (set with the Dictionary setting) when verifying a password.

Note: To use the dictionary file, you must also set the dictionary format password rule (use_dbdict) to file. If the dictionary format is set to db, passwords that cannot be used are taken from the CA Access Control database and this setting is ignored.

Default: no