description: >
    Provides global user account policy related management.

properties:
    - name: MaxLoginAttemptBeforeLockout
      type: uint16
      description: >
          Configures the maximum permissible attempt before locking out the
          user. Value of 0 indicates that account lockout feature is disabled.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure

    - name: AccountUnlockTimeout
      type: uint32
      description: >
          Configures timeout needed (in seconds) to unlock the account after a
          lockout. Value of 0 indicates that account must be unlocked manually.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure

    - name: MinPasswordLength
      type: byte
      description: >
          Configures the minimum password length. Minimum password length
          specified in build time is marked as default value. This property
          cannot be configured below the build time default value but can be set
          to higher one for security reasons.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure
          - xyz.openbmc_project.Common.Error.InvalidArgument

    - name: RememberOldPasswordTimes
      type: byte
      description: >
          Configures the number of times old password shouldn't be allowed when
          trying to update new password. Value of 0 (by default) indicates this
          feature is not enforced.
      errors:
          - xyz.openbmc_project.Common.Error.InternalFailure