Configuring Password Policy Lockout Failure Count
To set the password lockout count to 3, use a command similar to the following:
dsconfig set-password-policy-prop
--policy-name "Default Password Policy"
--set "lockout-failure-count:3"
--hostname "localhost" --port "4444" --trustAll
--bindDN "cn=manager" --bindPassword admin --no-prompt