Re: Password management

[Rich.Frye@xxxxxxxxx]

I use the ID Recovery Database when a user decides to change their 
password and then forgets what they just changed it to.  I was never 
allowed to set password policies or database quotas.  Got to be real 
messy.

Richard A. Frye
Software Consulting Hardware, Inc.
(877) 936-9829 (Office)
(513) 936-0128 (Fax)
Rich.Frye@xxxxxxxxx
IBM Certified System Administrator - Lotus Notes and Domino 6/6.5




Chris Whisonant <Chris.Whisonant@xxxxxxxxxxxxx> 
Sent by: domino400-bounces+rich.frye=sch-i.com@xxxxxxxxxxxx
05/17/2005 02:26 PM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Subject
Re: Password management






Password policy? What's that? About a year and a half ago our CEO (former 
VP of IT) mandated the new policy. No password expiration at all and we 
couldn't require "complex" passwords. So I'm using my Level 3 password 
quality scale with minimum of 6 characters.

When I register a user I create an ID in the address book (eases client 
installs), mail file (has to be there for DWA encryption/signing), and on 
a mapped drive to a subfolder on my mail server's data directory.

Chris Whisonant
Comporium
Senior Mid-Range Systems Administrator
IBM eServer Certified Systems Expert - iSeries Technical Solutions V5R2
IBM Certified System Administrator - Lotus Notes and Domino 6/6.5
803.326.7270 | 803.326.6142 fax
http://cwhisonant.blogspot.com/

domino400-bounces+chris.whisonant=comporium.com@xxxxxxxxxxxx wrote on 
05/17/2005 12:52:07 PM:

> 
> 
> 
> 
> 
> I just wanted to ask how everyone else deals with passwords and user 
ID's.
> Do you force your users to change passwords? and if so do you also 
require
> them to carry there ID file on a floppy, and make sure that they 
remember
> everytime they change there password they need to copy the ID file to 
the
> floppy again? Maybe I am completely off base here but I don't see why if 

I
> attach a user ID to a person document that the password doesn't change 
on
> the ID file in the person document, and follow the user to say a new
> machine, or a clean install of Lotus. What are the rest of you doing to 
get
> around this? What happens if the user doesn't copy there ID file to a
> floppy and the machine dies? they are just dead in the water? not cool! 
I
> can accept (not that I agree) not being able to change a users password,
> but I cant agree that the passwords don't follow the user. Any help,
> suggestions would be great.
> 
> Thanks,
> Scott Reece
> Notes Admin / Systems Analyst
> City of Bend
> sreece@xxxxxxxxxxxxx
> Office - 541-388-4426
> Pager - 541-318-7680
> 
> "The probability that we may fail in the struggle ought not to deter us
> from the support of a cause we believe to be just"  Abraham Lincoln
> _______________________________________________
> This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
> To post a message email: Domino400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/domino400
> or email: Domino400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/domino400.
> 
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.