Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

4
votes
2answers
124 views

Disable password complexity on Windows 2012 R2

I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only. I have created a group (called Formation) in AD to identify these ...
3
votes
1answer
61 views

The password on this account cannot be changed at this time?

A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon". When he logged on and entered the temporary ...
0
votes
1answer
29 views

How to automate FTP user password updates, on a remote IBM z/OS FTP server?

We wish to solve the business problem of how to schedule automated password updates, on a remote FTP server (note: z/OS) over which we have no administrative control, before the password expires. For ...
0
votes
0answers
42 views

Active Directory password policy for Business Days?

I don't think there's any way to do this after looking through Microsoft's password policy documentation, but on the off-chance that someone was particularly clever: Is it possible to create a policy ...
0
votes
0answers
20 views

Must change password during password change AD on SVR 2003

I have a Server 2003 AD (going to be replaced next quarter) with around 100 users, only around 50 or so are active. I've noticed that in the past month, any time a user password expires they are ...
0
votes
1answer
27 views

Do “Old Passwords” have an expiration?

There are some systems that keep track of "old passwords" for increased security, like Databases, Domain Controllers, personal pages (Like Facebook) etc. Do these "old passwords" have an expiration? ...
0
votes
0answers
10 views

Create multiple password policies in redhat

How can i create multiple password policies in linux redhat, for example a password policy for the sudeors and another policy for normal users?
2
votes
1answer
195 views

Allow self password change using LDAP(s) with Samba4

I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ ...
3
votes
3answers
203 views

Kerberos with OpenLDAP backend: Password Sync HowTo

The basic setup is an OpenLDAP server. The users are provisioned and the passwords are set. Now we decided to add an MIT KDC for being able to use Kerberos. We configured the MIT KDC to utilize the ...
0
votes
0answers
11 views

Can password reset failure messages be made more verbose in OWA Exchange 2007?

Our standard password reset workflow requires resetting the user's password in OWA. Some users are becoming frustrated, because reset failures do not tell them why their password could not be reset. ...
2
votes
0answers
36 views

Forced to change expired password when using ssh key

I am working in an environment where I have an account on multiple linux machines where accounts and passwords are managed independently (no active directory/LDAP/etc) and passwords expire every 30 ...
0
votes
1answer
14 views

Konica Bizhub Photocopier - Change Pin

We have a Konica Bizhub Photocopier. When we use the device, we have to enter the pin/password: 1135. I also have to use this pin when I authenticate a user account so they can print over the network. ...
0
votes
1answer
17 views

Logging or Auditing functionality for un/successful access to password hash files and other authentication files on Windows Server 2008 R2

I have been asked to find whether there is auditing enabled for one of our Windows Servers for accessing password hash files or other files used for authentication. Does anyone know if there is a ...
1
vote
1answer
1k views

Postfix + Dovecot with MySQL backend: md5-hashed passwords and CRAM-MD5 auth

My question What are the risks of switching from MD5 to CRAM-MD5 passwords in the database, especially considering the following, and how to approach that for an existing installation (provided I ...
1
vote
1answer
38 views

How can I automate the retrieval and usage of passwords from within a script?

We have automated scripts that access certain devices and are getting the passwords for the devices from a root-read-only plain-text file. Is there some kind of architecture we can use so that we can ...
3
votes
2answers
77 views

AD | Prevent admins from changing passwords to the same thing

I have an interesting security problem: Admins with ad access have been changing their password to the same thing, and breaching the company security policy. User side, standard AD complicated ...
4
votes
2answers
426 views

Is there a way to change passwords on multiple servers simultaneously?

x3 Server 2012 R2, x2 Server 2012 My system has 5 servers; 1 Hyper-V server hosting 2 vm servers (these are the x3 2012 R2 servers), and a Win 8.1 pc running hyper-V that hosts 2 more vm servers (...
2
votes
3answers
478 views

Unable to change domain password even if the password is complex

I have a problem with users not being able to change their passwords. When they try to change the password, they get this error: "Your new password does not meet the length, complexity, or history ...
1
vote
1answer
135 views

How to change Account Lockout Threshold when the path cannot be found

I am trying to change the account lockout threshold for all the users on our domain. The threshold should be three, but there are users who get locked out after one mistyped password, and others who ...
-1
votes
1answer
81 views

IT for a small organization: mailing lists, file server, hosting [closed]

I've been asked to help manage my church's information systems. We're small (~3 staff, ~150 parishioners), which puts us below the needs of a lot of the "Church Management" software I've seen. The ...
0
votes
1answer
265 views

Cannot enforce password change in OpenLDAP with Password Policy Overlay

I've implemented Password Policy Overlay on OpenLDAP on Debian Stable. The server side and the policies are working as expected. However, after expiration I cannot force users to change their ...
1
vote
2answers
229 views

How to store admin passwords in a way that can be accessed by multiple admins? [closed]

How to store all the admin passwords for routers, servers, desktop computers in the network if they need to be accessible by multiple admins? There are so many that they can't be memorised and they ...
3
votes
1answer
183 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
14
votes
3answers
2k views

Is there a safe way to store passwords used for ssh by a script?

So first, I know, I should use key auth with SSH. No need to explain me that. Issue here is that I have a (big) bunch of servers, and I need to have a script be able to connect each of these. I use ...
-5
votes
1answer
78 views

Is 10 character (letters and numbers mixed) password strong enough for Internet Servers? [closed]

Assuming ssh brute force attacks. Assuming the following IPTABLES configuration: DROP tcp -- anywhere anywhere tcp dpt:ssh state NEW recent: UPDATE seconds: 120 ...
28
votes
4answers
6k views

Is there a way to provide user-specific passwords for Wi-Fi?

Is there a way to provide user-specific passwords for Wi-Fi, so that different users have different passwords? I'd like to provide each user with a different password for my Wi-Fi connection.
1
vote
1answer
480 views

Mapped Network Drives Persistently Requesting Credentials

I run a small office network with one Windows 2008 R2 DC and eight Windows 8.1 clients connecting to it. All of the machines have computer accounts on the domain and each user has an old school logon ...
0
votes
1answer
145 views

Password Manager Pro backend database MS SQL vs PostgreSQL [closed]

I'm looking to manage users passwords through the programme Password Manager Pro. Reading the documentation it explains that you can use ether your own MS SQL database or use their default PostgreSQL ...
0
votes
1answer
908 views

Disable Admin password requirement on Domain user PC

So here is my situation: My company runs a "Windows 2003 Server Standard Edition" domain server, connected to a bunch of Dell Optiplex PC's (380's, and 9020's). The older Dells (380) are connected to ...
0
votes
4answers
350 views

Security policy: servers without root/administrator password

I am considering running public web and application servers with blank root/Administrator passwords, and I'm wondering whether this might be a bad policy. I see several advantages of having no ...
3
votes
2answers
3k views

Must create PowerShell script to change Password Expiry and Date to change next password

I've been tasked with creating a script that reads in a file a list of Active Directory user IDs and then clears the flag for Password Never Expires. In addition, my security officer doesn't want the ...
3
votes
1answer
133 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
4
votes
1answer
675 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
0
votes
1answer
4k views

Password reset fails for end users when minimum password age set for more than 0 days

Our Help Desk has been resetting user passwords with "user must reset password at next logon" for years. Recently reset default domain policy for "minimum password age" from 0 days to 5 days. Now ...
0
votes
1answer
26 views

Unassigned password has expired

On a RHEL6.4 box, I have a user who hasn't been assigned a password. In the /etc/shadow file, the password is shown as !!. This is intentional; that user only logs in using public key authentication. ...
2
votes
1answer
2k views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
5
votes
1answer
16k views

How is the “change password at next logon” requirement supposed to work with RDP using Network Level Authentication?

We have a Windows server (2008 R2) with the "Remote Desktop Services" feature installed and no Active Directory domain. Remote desktop is set up to "Allow connections only from computers running ...
2
votes
0answers
303 views

Deploy RDWeb on a non-default website

I have a public website and a private site set up like below: Public site: samplesite.com (http) Private site: my.samplesite.com (https) I'm trying to use RDWeb to enable users to change Active ...
1
vote
1answer
2k views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
-1
votes
1answer
124 views

establish passwordless login without asking the user [duplicate]

On Linux when using dsa keys I establish passwordless login with the command ssh-copy-id -i .ssh/id_dsa.pub user@target.host This prompts the user for user's password on target.host. My script ...
2
votes
1answer
75 views

Best practice for assigning passwords in a company

I work in a small company and have been spending a lot of time optimizing our network. Our security system is, sadly, abysmal, seeing as no one ever really took care of it. So I'm looking for an all-...
3
votes
1answer
1k views

smbk5pwd overlay on OpenLDAP 2.4

I have an OpenLDAP server and I want to configure the smbk5pwd overlay to make OpenLDAP update the sambaNTPassword and sambaLMPassword attributes automatically when a change occurs on userPassword. ...
2
votes
2answers
4k views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
2
votes
0answers
61 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
1
vote
1answer
160 views

Remote Windows user's password will not update

One of our remote users had his domain account password expire, so he logged onto a terminal server in the same site as the RRAS server he uses for RA VPN to reset his password. He stays connected 24/...
2
votes
2answers
281 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
4
votes
0answers
553 views

Outlook Change Password Prompt - What enables this, and what do I put for Exchange Server?

One of my end users sent me this screen, which is obviously indicative of an expired user password I'm unable to replicate this in my lab, nor do I know what value to put in for Exchange. (is it ...
11
votes
4answers
4k views

How do i change Active Directory Password in Windows 2012 Terminal Server without Using CTRL ALT

How do I change Active Directory Password in Windows 2012 Terminal Server without Using CTRL+ALT I can't use CTRL+ALT+END And CTRL+ALT+DEL Is there any other method for invoking the Security Screen ?
-1
votes
2answers
37 views

How do I change a third party service password without stopping my service that depends on that service?

Here's my scenario: I have a service that has to run 24/7 and depends on a third party service that has a password. I need to have that password changed. If I blindly change the password my service ...
9
votes
2answers
24k views

Cannot disable password expiry on Server 2012

I have an internal only Windows Server 2012 which I want to disable the password policy on. (The server is also a domain controller, if that makes any difference.) I've tried following the ...