Config settings to support PCI-DSS
Config settings to support PCI-DSS

Configuration settings to support PCI-DSS:
1. Disable users based on given minimum number of days of inactivity.
2. Lockout a user if number of failed attempts exceeds given limit.
3. Lockout user for a given amount of time if locked out.
4. Expire a password after given amount of days has passed
5. Require the user to create passwords that do not match the past given
   number of iterations.
6. Limit the number of times a password can be changed per day.
7. Require password complexity

Co-Authored-By: Ron De Rose ronald.de.rose@intel.com

Partially-Implements: blueprint pci-dss

Change-Id: I3ed5ca466ad15eab3c6e75aff3bb59543ecaabaa

cernops/keystone,openstack/keystone,mahak/keystone,rajalokan/keystone,ilay09/keystone,ilay09/keystone,cernops/keystone,ilay09/keystone,openstack/keystone,rajalokan/keystone,openstack/keystone,mahak/keystone,mahak/keystone,rajalokan/keystone