142 IBM Content Manager OnDemand Guide
If you click Password Always Expires, users must change to new passwords each time that 
they log on to a server. To set a specific time limit for passwords, select Expires In __ Days 
and enter the number of days that passwords are valid in the space that is provided. The 
value can be 1 - 365.
Minimum Password Length
This setting specifies whether passwords are required. If passwords are required, it specifies 
the minimum number of characters that passwords can contain. The default value is At Least 
8 Characters, which means that passwords must contain at least eight characters.
If you click Permit Blank Password, which means that passwords are not required, the valid 
password length is 0 - 128. 
To set a specific minimum password length, click At Least __ Characters and enter a 
number in the space that is provided. The value can be 1 - 128. 
When a user changes a password, the client checks the number of characters that the user 
entered. The new password must contain the minimum number of characters. Otherwise, the 
user receives an error message. 
Password Expiration Notification
This setting specifies whether to notify users that their password expires within the specified 
number of days.
Changing an Expired Password
Content Manager OnDemand provides password expiration processing to help you manage 
security on the system. Y ou can set a value that represents the time in days that passwords 
that are assigned to users remain valid. After a user’s password reaches the value that you 
specify, the user must change the password. 
After a password reaches the expiration value, the next time the user logs on to a server, 
Content Manager OnDemand prompts the user to enter a new password. The user must 
enter the current password, a new password, and verify the new password by reentering the 
new password.
Session Inactivity Time Out
This setting specifies when Content Manager OnDemand terminates sessions between 
inactive clients and the server. The default setting is Time Out in 60 Minutes. Never Time Out 
means that Content Manager OnDemand does not terminate a session, regardless of how 
long the client remains inactive. 
To set a specific inactivity timeout, click Time Out In __ Minutes and enter the number of 
minutes in the space provided. The value can be 1 - 1440 (24 hours). The period of inactivity 
is measured between requests to a server. For example, when a user enters a query, Content 
Manager OnDemand searches the database and builds the document list. This action 
completes a request to the server. If the user does not work with the items in the document 
list, open another folder, or start another query before the inactivity timeout occurs, Content 
Manager OnDemand automatically terminates the session with the client.