Strong Password Policy

Hello,
I have done a little looking around and I think I see a couple of possible
solutions to implement strong password policies. Identity Manager, and
Connectotel. Is this all there is? Identity Manager seems like overkill for
a single Netware server and Connectotel seems weak as there are files on
each workstation. Not to mention the trouble of having to go desktop to
desktop.
Am I missing something here? What's the easiest way to implement a strong
password policy in a Netware Small Business environment with 25 Windows
desktops?
TIA,
Lou

Hi Anders,
Yes that appears to be the problem... now a new problem. When I choose to
edit the policy I have no check boxes or drop down lists to choose alternate
settings. I guess I will create a new policy. However if you know how I
should make changes I'd sure like to know.
Thanks so much for your help,
Lou
"Anders Gustafsson" <[email protected]> wrote in message
news:[email protected]..
> Could it be this?
> http://www.novell.com/support/search...200%2010519371
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop
> Pedago, The Aaland Islands (N60 E20)
>
> Novell does not monitor these forums officially.
> Enhancement requests for all Novell products may be made at
> http://support.novell.com/enhancement
>
> Using VA 5.51 build 315 on Windows 2000 build 2195
>

Similar Messages

How to make changes in strong password policy

hi,
how to make changes in strong password policy.
I m using apex 4.2.
pls help

1003090 wrote:
I created a login page, but when i m putting a password or more then 7 character then in place of Invalid Login Credentials , its saying
ORA-06502: PL/SQL: numeric or value error: character string buffer too small.
I need to put a password of min 8 character, since its taking not more then 7 so i cannot use validation for the same.You already have a thread open on that: +{thread:id=2532900}+. Continue with that issue there.
If the original question above relating to how to configure password policies is answered then close this thread.

Strong password policy -- is it

I have enabled "strong password policy" plugin. However, it seems that it is only reflected on global password policy. Can we define a customized pwd policy and override that?

The "strong password check" plugin is, like most of plugins, global to the server and cannot be overwritten by customized pwd policy...
Regards,
Ludovic.

Setting up Strong passwords in E sourcing 9

Hi All,
How can i setup strong password standards for both Internal and External Users in SAP Sourcing 9.
Best,
HM
[email protected]

Hello Harsh,
I presume the sellside (fsvendor) is attached to an LDAP? If so you could simply use the LDAP`s complexity rules/password policy. You can point the SAP Sourcing application in it`s Directory Configuration via the "Properties" tab (properties: "password_policy_dn" and "passwordlength" are available for this) to those.
The application itself does not control this. Does this help?
Regards,
Joerg Lippmann

Password Policy Directory 6.2

Hello;
I am trying to implement password policy on directory 6.2. After, I set the following parameters, my instance fails to start. Is there a specific way to turn password policy? Much appreciated!
dsconf set-server-prop pwd-strong-check-enabled:on
dsconf set-server-prop pwd-check-enabled:on
Thanks,
Irfan

Thanks Ludovic;
There are some issues with "messages" that the server displays in 6.2. I got passed the error messages and server is starting. My issue is really setting up a password policy on an ou not using global password policy. I created a new policy in DSCC and assigned to a user. However, that policy doesn't apply to the user. The global policy that I changed to have numeric and upper caps applies to this ou as well -- which is not what I want.
I have a global policy which has numeric and uppercaps etc on o=example.
I have a new password policy (using DSCC) on ou=people,ou=orgexample,o=example. (weak policy -- min length 3)
Somehow only the policy on o=example applies to everyone.
Thanks,

Sun DS 6.3 Reject same login as password in a password policy

Hi,
It is possible to create a password policy to avoid setting the same user login as the password ? I have been looking at the [administration documentation|http://docs.sun.com/app/docs/doc/820-2763/fhkrj?a=view] for password policies but it seems this isn't possible.
It can be done somehow ?
Thanks.

if you set :
pwd-strong-check-enabled : on
pwd-strong-check-require-charset: any-three
it will require numbers & uppers etc... so therefore password=username wont be allowed anyway.

Strong Passwords in Dir 5.2?

Does anyone no of a way to enforce strong passwords in Directory Server 5.2. It looks like the built in syntax checker does not enforce strong password syntax policy. Is there perhaps a plugin for that?
Thanks,
Ray

True, for some appliations we may need more password enforments , the password policy comes with directory does most of it, such as locking,history,expiration, min/max length and some syntax check. You can write your own plugin using SDKs but be carefull, bad plugins may effect performace and may also make server crash.
Some of the pasword management tools, such as Psync , has plugins for stronger syntax for Sun Directory servers but I am not sure they will sell pulgins seperatly
Thanks
Krishna Kusupudi

Password policy change

In the past we pretty much allowed very simple policy with passwords. With people accessing the cloud more and people logging in remotely to our site we need to make passwords a little more difficult. My question is if I changed the password policy
will this immediately affect all users. Frankly I only want to have them change their password to a stronger password when their old password expires. This will reduce the support that will be needed. I mean if I change the policy and suddenly
everybody needs to change their password on the same day I'm sure I'll get support calls and grumbling etc.
So to repeat my question if I change the password policy so that people need to put in more complex passwords will this affect everyone immediately or will it only affects them the next time the password expires, which we have set 120 days.
Thank you

if you are already using password expiry, the new complexity requirements are enforced at the next password change event (either expiry or user-initiated or admin-initiated).
If you are not using password expiry, and you enable password expiry, the password age will be examined at the next user-logon, and your new policy will be enforced.
password complexity, and password history, are only examined for policy compliance, during a password-change event.
A password-change event, is either user-initiated (user chooses to initiate their password change for their own reason), or, admin-initiated (admin resets or expires the password for a user), or, password-expiry-initiated (a user attempts logon, the password
age is examined according to policy, and the age exceeds that permitted by policy, which triggers the change-password dialog, and, complexity+history is examined for policy compliance)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

What is the new password policy?

What is your new password policy? All you state on the page where it forces us to change without being able to continue is a meter that says whether its strong enough. How about actually stating what the requirements are on that page? Even when clicking on the Password Help link, it doesn’t state what the requirements are. This can be very frustrating to users trying to create a password model.
After toying around with some passwords, I am guessing it is just like 12 characters regardless of whether they are upper/lower case, numbers, or special characters. This policy is really lacking for any type of real security measure.

Hello tmanXX,
Internet security is a topic of much importance and discussion these days. In order to ensure that you and our other customers have the most enjoyable and secure experience, we recently established new requirements for passwords on BestBuy.com. Even so, you ask very good questions about the standards that we have established.
When changing your password on our website, we have a visual indicator to verify your password strength against our criteria. We recommend a variety of letters (upper and lower case), numerals, and symbols deployed randomly for best results. Our standards are not published to add a further obstacle to those who might try to use such information with ill intent. I apologize for any aggravation that you may have endured as a result.
Please know that I'm grateful for your feedback on our password standards and that you took the time to pose your questions and concerns.
Sincerely,
John|Social Media Specialist | Best Buy® Corporate
Private Message

Questions on Password Policy

Hi All,
I have couple of questions on password policy behavior upon OAM-EBS integration.
Currently "Applications SSO Auto Link User" options is set to "Disable" in my env.
Please confirm if following is the right understanding.
1.     Upon OAM-EBS integration, user whose EBS account is linked with OID cannot change their password from EBS console. EBS password policy (Password expiry etc) will be overridden by OID policy.
2.     EBS user`s whose account is not linked with OID can change the password and EBS password policy will be applicable for that user.
3.     To have the user use EBS password policy he must be unlinked by setting up USER_GUID attribute to null in FND_USER table.
Thanks in advance.
-Sam

Sam,
Your understanding is correct -- Please see these docs.
Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On [ID 261914.1]
USE: EBS Technology Stack OID and SSO [ID 1461466.2]
How To Temporarily Stop User Synchronization From OID To FND User [ID 1120413.1]
Troubleshooting Oracle Access Manager and Oracle E-Business Suite AccessGate [ID 1077460.1]
Integrating Oracle E-Business Suite with Oracle Access Manager 10g using Oracle E-Business Suite AccessGate [ID 975182.1]
Thanks,
Hussein

How do you apply the same password policy to every PDF document you create with inDesign?

All,
Adobe peeps!,
I don't know if this is really supported with inDesign 5.5, but here is my my use case:
I constantly create more than 10 PDFs a day using inDesign
On all PDF's I create, i want to apply password security to protect them
But in order to do so, within inDesign, I am always forced to go to the "security dialogue" pane to set up the same permission and passwords over and over again
This gets tiring :/
So what I am hoping to do is the following:
Like acrobat, I want to create a password policy within inDesign
I want all PDFs created to have such a password policy be automatically applied
I know acrobat supports something like this (http://help.adobe.com/en_US/acrobat/pro/using/WS58a04a822e3e50102bd615109794195ff-7d68.w.h tml), but, unless I may have missed something, the Acrobat feature is limited. That is, the help link does not tell me how to automatically do this with Acrobat either (the link does not explain to me how to "automatically apply the same password security policy to every PDF document I save within the application). I think the only way to do so is via "Adobe LiveCycle Rights Management ES", but for non server users, I am hoping there is another way.
So my questions are:
Is it possible to create password security policies in inDesign?
Is it possible to apply the same password security policy to every PDF i create in inDesign?
If not, can I change default settings within Acrobat ProX to automatically apply a password security policy everytime I save a PDF?
If all fails, do you guys know of any extensions that can support this?
Any help would be great. Thanks!

Steve,
Thanks for your notes. To follow up on your response.
Bummer. I kinda had a hunch at this inDesign limitation.
I have been aware of the method for setting up of a security policy within Acrobat. While this feature does cut down some of the work involved in creating and applying password policies to pdfs, what I am looking for with Acrobat is to apply the same password policy to every document I save from the app. Automatically. Without having to manualy select a policy.
I think my solution will have to lie in me creating some sort of script to help support this need. I don't think Acrobat Pro X has the capabilities to allow me to tinker with, say, creating a save PDF preset that will allow me to automatically apply a password policy.
PS. I am using acrobat pro x.

Different Password Policy for Different User Groups in ACS 4.2

Hi All,
Can some one provide a solution for the below requirement?
We do have ACS 4.2 appliance managing firewalls of different clients. The users are common i.e, helpdesk administrators. One of the client came up with setting different password policy for managing their devices i.e, the client wants to have min 15 characters as password length. We do have currently 8 characters as min password length. Can we change the password policy to min 15 characters only for managing the firewalls of this client whereas for all other client firewalls we feel better to have 8 characters as min password length?
It seems that these password policies are global & affects all the users.
This is something like, having two sets of password (for each user) policy depending on the client which he is going to manage.
For my knowledge, i think that this is not possible. But, thought to cross-check with experts!
-Jags.

Hi jags,
Yor're correct. Password policy on ACS will affect all internal user. We can't create different password policies for diferent clients/connections/set_of_users
Password validation options apply only to user passwords that are stored in the ACS internal database. They do not apply to passwords in user records in external user databases; nor do they apply to enable or admin passwords for Cisco IOS network devices.
HTH
Regards,
JK

How to ignore the password policy in a custom workflow?

Hi,
We have a custom workflow which is called via SPML to provide 'Administrator Change Password' functionality in a portal.
Our password policy sets the String Quality rules and Number of Previous Passwords that Cannot be Reused. But we like to bypass the password policy when the password administrators (who have a admin role with a capability - 'Change Password Administrator'). At least, restriction ' Number of Previous Passwords that Cannot be Reused' need to be ignored (But password need to be added to the history... cannot disable adding passwords to history).
Please advice me how it could be achieved?
The workflow steps:
1. Checkout 'ChangeUserPassword' view for the user as an administrator
2. Set the new password in the view, set true to view.savePasswordHistory
3. Set password on the resources
4.Checkin the view
Thanks
Siva

Thanks eTech.
My main goal is to skip the password history check (new password can't be a last used 10 passwords) when admin change password workflow is launched. As you suggested , I created a special password policy exactly as our regular password policy excluding "Number of Previous Passwords that Cannot be Reused" setting.
Then before change the password of a user as admin, special policy is attached , password changed, and user's password policy is reverted back to regular one. The issue is, as the special policy does not enforce the password history check, the whole password history of the user is wiped out from the user object when the password is changed by admin change password workflow. We don't want this to happen.
Please guide me whether is anyway to achieve just ignoring the password history without any other impact on user.
Is adding passwords to user object's password history list is triggered by "Number of Previous Passwords that Cannot be Reused" setting of the password policy??
Thanks
Siva

Problems Implementation Password Policy on OIM 9.1.0

Hello,,,
Please help me,
i was create password policy on OIM, i inject that pass policy to one of resource object, i create object form and process form with same configuration ( field table ), i use data flow to transmit the data between object form and process form..
i set process definition with check AUTO SAVE FORM, and AUTO PRE-POPULATE,
the Problems is :
1. When i try to do provisioning process ( with delegated admin : xelsysadm ) to that resource object (target system) , after admin submit , status process is provisioning, and the detail is System Validation : Pending
2. Then i try to remove password policy on resource object, and i try again to do the provisioning, and the process working fine, status process provisioned, detail process
system validation : completed, Create user : completed
why it'is happen ?
that the important point is, why AUTO SAVE FORM cannot working fine if i inject Password Policy on resource Object...
Warm regards,
Ricky R
Manila

When you say you have checked auto prepop means that there are pre pops attached to certain fields on your process form that you want to be auto triggered before provisioning commences. So i'm assuming that you are pre-populating password field. Is the password value that you are prepopping the field with conform to the standards of the password policy? If not that could be the reason why your provisioning process isnt getting kicked off. you will need to supply a password (either manually or if you want to automate it (pre pop it)) that coforms to the password policy defined on the resource object. Also i think the name of the password field must be _PASSWORD.

How to create a password policy for password syntax?

Hi,
I need to apply a password policy in OID that checks the password syntax. We need to verify that the each password contains at least three of the four character groups (Capital Letters / Small Letters / Numbers / Special Characters). In OID, I may only check for minimum Length and a min Number of Numbers. Is there an easy way to do this? (Plugin in OID?)
For the Web-Part (eg. Portal) its quite easy, as we may create a Javascript to check the syntax on the "change password" page, but as we have diffrent types of access, we want to get the rule applied in one place.
Thanks for help
Alex

Hi,
In addition to Martin’s suggestions, we can also choose to change the scope of the existing GPO with Security Filtering.
Regarding Security Filtering, the following article can be referred to for more information.
Security filtering using GPMC
http://technet.microsoft.com/en-us/library/cc781988(v=WS.10).aspx
Filter Using Security Groups
http://technet.microsoft.com/en-us/library/cc752992.aspx
Best regards,
Frank Shen

Strong Password Policy

Similar Messages

Maybe you are looking for