The tag has no usage guidance.

learn more… | top users | synonyms

3
votes
1answer
61 views

The password on this account cannot be changed at this time?

A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon". When he logged on and entered the temporary ...
-2
votes
1answer
95 views

Active directory 2012 password policy

I have a windows server 2012 R2 active directory environment running in my office. I have a primary domain and a child domain. Both the domains have password complexity enabled. Active directory ...
-1
votes
1answer
48 views

Openldap Password change at first login

I have implemented openldap in centos 6, I want to push password change policy at first login. Which pwdPolicy ObjectClass and Attributes can accomplish this task ? # MyOrgPPolicy, Policies, ...
5
votes
3answers
114 views

Block RSA authentication when password is expired

I'm setting up a FreeIPA server on CentOS 7, and I want to block RSA authentication over SSH when the password is expired. By default, when I expire the user password and they login, they are forced ...
0
votes
0answers
32 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
0
votes
1answer
115 views

Applied DISA STIGs for Windows 7, locked out all accounts, how to get back into the box?

I see the response below, which I appreciate it, but I do not feel it qualifies as an answer. It states little more than, "You shouldn't have done that", but doesn't provide any suggested solutions, ...
3
votes
3answers
812 views

Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain

I'm using federated identity for Office-365 single sign-on. I have added the password change endpoint to my ADFS 3.0 server, and successfully opened the adfs update password page. However, whenever I ...
3
votes
1answer
94 views

How convince Security auditors to change frequent password change policy?

I am a new Junior IT Manager in a small company of around 500 employees and the current policy regarding passwords has enforced password expiration within 30 days, with a password history of 5. As ...
0
votes
0answers
76 views

Why isn't pwdReset automatically set when pwdMustChange is true?

Every other directory server, i.e. Oracle's will automatically set pwdReset to TRUE if pwdMustChange is defined in the policy: When a user's password is changed by another user, such as a password ...
2
votes
2answers
303 views

Force user to change AD password at logon before Explorer loads?

Background: In our environment, users log onto a Windows 7 PC and then launch a full-screen Citrix XenApp (same as Microsoft RDSH) desktop. Citrix Reciever with single-sign on is used to launch the ...
3
votes
2answers
1k views

Enforce 15-character minimum password length on Windows

I've been given a requirement to enforce a minimum password length of 15 characters on my Windows-based systems. Supposedly, this is possible and is being done on some other systems already. However, ...
2
votes
1answer
143 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
0
votes
1answer
193 views

Cannot load compiled ltb-password-check module on Debian

I'm trying to compile and load LDAP Tool Box Project's password checker module to improve the capabilities of password policy overlay on the Debian 7.8. Here's what I've done so far: I've installed ...
0
votes
2answers
483 views

Cannot change password policy

I am logged in as the administrator in my Windows Server 2008 computer which is a domain controller. The password policies in local security policy are grey and I cannot change them. Do I have to ...
-1
votes
0answers
28 views

Auditing tool for Windows security policies [closed]

What tools do you use to audit Windows security policies. For example, I configured a Windows machine (A) with the policies (GPO security policies) that we want. (A) now is a baseline. How then could ...
2
votes
2answers
1k views

Apply a password group policy seperate from the Default Domain Policy?

Im trying to keep my Default Domain Policy clean and standard and I want to make a GPO for my password policies. I made it but it still gets the policies from the Default Domain Policy object. I ...
0
votes
1answer
265 views

Cannot enforce password change in OpenLDAP with Password Policy Overlay

I've implemented Password Policy Overlay on OpenLDAP on Debian Stable. The server side and the policies are working as expected. However, after expiration I cannot force users to change their ...
3
votes
1answer
183 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
4
votes
2answers
816 views

Workstations hang on “Change Password” after expired Password

For one of our customers we have configered a maximum password age of 90 days. If those 90 days are over, the users are forced on logon to change their password. This worked fine for the past 9 months,...
1
vote
1answer
957 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
2
votes
1answer
6k views

Find current password complexity requirements on domain

I simply need to know what my network's password complexity requirements are at this time. I believe we had competing group policies in place (trying to clean up that mess) and I want to see which ...
0
votes
1answer
911 views

Disable Admin password requirement on Domain user PC

So here is my situation: My company runs a "Windows 2003 Server Standard Edition" domain server, connected to a bunch of Dell Optiplex PC's (380's, and 9020's). The older Dells (380) are connected to ...
0
votes
0answers
282 views

enforce password length on ubuntu with pam_cracklib

I was trying to enforce password length to a minimum of 10 using pam_cracklib. here is my /etc/pam.d/common-password password requisite pam_cracklib.so retry=3 minlen=10 ...
1
vote
1answer
256 views

ldap ppolicy implementation for brute force prevention

I have an openldap server (with user passwords) open worldwide which I'm trying to secure. Step 1 was to limit access to data to authenticated users via ACLs. Step 2, to prevent brute force attacks, ...
9
votes
1answer
2k views

Does the password truly expire?

One can enable password expiration (aka password maximum age) on a Windows domain. I'm a little puzzled though about the meaning of that so-called expiration: It looks like the password does not ...
0
votes
1answer
49 views

Login authentication vanished from MongoDB install

A few months ago I enabled password protection on my MongoDB install. Today I ran the Mongo client and forgot to use my login details. Instead of rejecting nearly everything I try to do from the ...
0
votes
2answers
119 views

Required strength for Admin/Windows passwords [closed]

We're trying to come up with a policy for required password-strength for Windows passwords on our domain. I was leaning towards a 10 character minimum with special characters and uppercase. We have a ...
0
votes
1answer
183 views

Change hashing password algorith in Jasig CAS

I configurated my Jasig CAS to authenticate user from LDAP. Now, I would to change my hashing password algorith. Where, in CAS configuration, have I to configure it? I use Jasig CAS 3.5.2 and ...
2
votes
3answers
5k views

User unable to change password - Active Directory Group Policy

I've seen this issue come up, but no answers seem to be applicable. When a user tries to change their password using control-alt-delete -> change password, they're getting a "Unable to update the ...
0
votes
1answer
55 views

AD password not synchronising properly

I have 600+ users in AD, but only one causes me trouble. The problem is I can reset his password from AD, he can then log in to his machine. After that he would like to change his password from ...
1
vote
1answer
283 views

OpenLDAP pwdPolicySubentry for organizationalUnit

Can you set a pwdPolicySubentry for an organizationalUnit, so that all entries contained in that organizationalUnit follow that password policy?
0
votes
1answer
599 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
7
votes
1answer
645 views

How do I implement a Fine-grained password policy and expect XP machines to play nice?

I have a 2008 R2 functional level domain and am in the middle of implementing the first actual password policy my organization is going to use. To slowly roll this out to our users, we have chosen to ...
2
votes
2answers
450 views

How can I randomize or stagger password expiration through Active Directory?

We are about to implement a new password policy that will require users to change their password every six months. We also need every user to change their password this week. I'd rather not create a ...
1
vote
1answer
828 views

Changing Password expiry date for limited users in Domain

I have 50 users in my domain. But i have to set password expiry days for 90 for only 10 users. How can i do it. How can this be done without affecting any other users Password Policy.
3
votes
2answers
226 views

How long does a putty keyphrase need to be (i.e. how does putty encrypt private keys)

I'd like to know what a good minimum password length for a putty passphrase is. This depends on the amount of entropy the passphrase needs to have, which in turn depends on the length one attempt ...
4
votes
1answer
5k views

How to change Windows Server 2012 password requirements when installing?

i'm trying to install Windows Server 2012, and i'm being prompted that the Administrator account password does not meet the password security requirements: The password you typed does not meet the ...
1
vote
1answer
3k views

OpenLDAP: pwdChangedTime attribute isn't created after changing the password?

I'm going to integrate the check_mk's Multisite with OpenLDAP. After configuring the LDAP connector, I get the following error when opening the "Users & Contacts" page: Error executing sync hook ...
3
votes
1answer
323 views

Issue with Mac RDP clients connecting to Server 2008 if change password at next logon checked

I have a weird issue I haven't been able to figure out (primarily because I don't have a Mac to play with). When a user is connecting into our Windows Server 2008 and 2008 R2 servers with local user ...
2
votes
1answer
869 views

Setting fine-grained password policy on an OU - Windows Server 2008

I found this article: AD DS Fine-Grained Password and Account Lockout Policy Step-by-Step Guide really useful to set fine-grained password policies for a user or a Security Group. But I haven't found ...
0
votes
2answers
1k views

WMI query to check setting “Reversible Encryption” in Windows XP

In Windows XP, there are two settings in Group Policy I'm looking at: Password must meet complexity requirements Store password using reversible encryption Both of these settings are under Local ...
3
votes
2answers
500 views

Changing Windows password policy [closed]

We currently have the almost defacto standard of requiring complex passwords on our Windows AD domain. But this XKCD cartoon caught my eye a few months ago when it came up on Coding Horror (I think): ...
2
votes
1answer
2k views

Changing domain password on DC fails regardless of complexity

I have a new Windows 2008 R2 Server (Standard, German). After installation from CD I enabled RDP Access, installed the Active Directory services and executed dcpromo. After reboot I log in via RDP as ...
2
votes
2answers
453 views

Is it possible to limit the number of user account password resets per day in Active Directory?

Windows domain environment here. We're looking at putting in a self-service password reset system (using Citrix Single Sign-on), and I'm trying to figure out if we can limit the number of password ...
0
votes
1answer
2k views

openldap: how to implement password policies?

I would like to implement password policies for all openldap users. there are 2 things i would like to do: password aging (users should be forced to change their passwords at least every 90 days) ...
3
votes
1answer
377 views

Samba, password change and windows error messages

I moved password quality checking in Samba from check password script to PAM, now when pam_passwdqc or pam_cracklib deny password change the user revives a "Access denied" error, not the standard "The ...