The tag has no wiki summary.

learn more… | top users | synonyms

7
votes
1answer
282 views

Does the password truly expire?

One can enable password expiration (aka password maximum age) on a Windows domain. I'm a little puzzled though about the meaning of that so-called expiration: It looks like the password does not ...
7
votes
1answer
340 views

How do I implement a Fine-grained password policy and expect XP machines to play nice?

I have a 2008 R2 functional level domain and am in the middle of implementing the first actual password policy my organization is going to use. To slowly roll this out to our users, we have chosen to ...
3
votes
1answer
2k views

How to change Windows Server 2012 password requirements when installing?

i'm trying to install Windows Server 2012, and i'm being prompted that the Administrator account password does not meet the password security requirements: The password you typed does not meet the ...
3
votes
2answers
335 views

Changing Windows password policy [closed]

We currently have the almost defacto standard of requiring complex passwords on our Windows AD domain. But this XKCD cartoon caught my eye a few months ago when it came up on Coding Horror (I think): ...
3
votes
1answer
292 views

Samba, password change and windows error messages

I moved password quality checking in Samba from check password script to PAM, now when pam_passwdqc or pam_cracklib deny password change the user revives a "Access denied" error, not the standard "The ...
3
votes
1answer
166 views

Issue with Mac RDP clients connecting to Server 2008 if change password at next logon checked

I have a weird issue I haven't been able to figure out (primarily because I don't have a Mac to play with). When a user is connecting into our Windows Server 2008 and 2008 R2 servers with local user ...
2
votes
2answers
126 views

How long does a putty keyphrase need to be (i.e. how does putty encrypt private keys)

I'd like to know what a good minimum password length for a putty passphrase is. This depends on the amount of entropy the passphrase needs to have, which in turn depends on the length one attempt ...
2
votes
2answers
165 views

Is it possible to limit the number of user account password resets per day in Active Directory?

Windows domain environment here. We're looking at putting in a self-service password reset system (using Citrix Single Sign-on), and I'm trying to figure out if we can limit the number of password ...
2
votes
1answer
337 views

Setting fine-grained password policy on an OU - Windows Server 2008

I found this article: AD DS Fine-Grained Password and Account Lockout Policy Step-by-Step Guide really useful to set fine-grained password policies for a user or a Security Group. But I haven't found ...
2
votes
1answer
570 views

Changing domain password on DC fails regardless of complexity

I have a new Windows 2008 R2 Server (Standard, German). After installation from CD I enabled RDP Access, installed the Active Directory services and executed dcpromo. After reboot I log in via RDP as ...
2
votes
3answers
1k views

User unable to change password - Active Directory Group Policy

I've seen this issue come up, but no answers seem to be applicable. When a user tries to change their password using control-alt-delete -> change password, they're getting a "Unable to update the ...
2
votes
2answers
207 views

How can I randomize or stagger password expiration through Active Directory?

We are about to implement a new password policy that will require users to change their password every six months. We also need every user to change their password this week. I'd rather not create a ...
1
vote
1answer
174 views

Changing Password expiry date for limited users in Domain

I have 50 users in my domain. But i have to set password expiry days for 90 for only 10 users. How can i do it. How can this be done without affecting any other users Password Policy.
1
vote
0answers
46 views

What are the mathematical implications of an overly-restrictive password policy? [closed]

I came across an interesting password policy online recently: "Please be sure to enter a password that meets the following criteria: must be 8 characters long must not be based on dictionary words ...
1
vote
1answer
52 views

ldap ppolicy implementation for brute force prevention

I have an openldap server (with user passwords) open worldwide which I'm trying to secure. Step 1 was to limit access to data to authenticated users via ACLs. Step 2, to prevent brute force attacks, ...
1
vote
0answers
76 views

OpenLDAP pwdPolicySubentry for organizationalUnit

Can you set a pwdPolicySubentry for an organizationalUnit, so that all entries contained in that organizationalUnit follow that password policy?
0
votes
2answers
71 views

Required strength for Admin/Windows passwords [closed]

We're trying to come up with a policy for required password-strength for Windows passwords on our domain. I was leaning towards a 10 character minimum with special characters and uppercase. We have a ...
0
votes
1answer
1k views

OpenLDAP: pwdChangedTime attribute isn't created after changing the password?

I'm going to integrate the check_mk's Multisite with OpenLDAP. After configuring the LDAP connector, I get the following error when opening the "Users & Contacts" page: Error executing sync hook ...
0
votes
1answer
60 views

Change hashing password algorith in Jasig CAS

I configurated my Jasig CAS to authenticate user from LDAP. Now, I would to change my hashing password algorith. Where, in CAS configuration, have I to configure it? I use Jasig CAS 3.5.2 and ...
0
votes
2answers
577 views

WMI query to check setting “Reversible Encryption” in Windows XP

In Windows XP, there are two settings in Group Policy I'm looking at: Password must meet complexity requirements Store password using reversible encryption Both of these settings are under Local ...
0
votes
1answer
473 views

openldap: how to implement password policies?

I would like to implement password policies for all openldap users. there are 2 things i would like to do: password aging (users should be forced to change their passwords at least every 90 days) ...
0
votes
0answers
27 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
0
votes
0answers
19 views

enforce password length on ubuntu with pam_cracklib

I was trying to enforce password length to a minimum of 10 using pam_cracklib. here is my /etc/pam.d/common-password password requisite pam_cracklib.so retry=3 minlen=10 ...
0
votes
1answer
30 views

Login authentication vanished from MongoDB install

A few months ago I enabled password protection on my MongoDB install. Today I ran the Mongo client and forgot to use my login details. Instead of rejecting nearly everything I try to do from the ...
0
votes
1answer
48 views

AD password not synchronising properly

I have 600+ users in AD, but only one causes me trouble. The problem is I can reset his password from AD, he can then log in to his machine. After that he would like to change his password from ...
0
votes
1answer
183 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...