RE: Problems Coming !!
Posted in 2000
Topics: Security, Permissions & Auditing
The key words here are should be and whenever possible (see below). If we can deactivate aging on every other server in the world, we should be able to deactivate it on si2061srvrp. If they insist on using password aging, they should be required to deactivate password reset / reuse limits so that after changing the passwords we can immediately set them back. Ask if you would like more info. Pat 404-573-5718 > ---------- > From: Bottoms, Douglas A (Doug) > Sent: Friday, May 05, 2000 6:02 AM > To: Becker, Thomas (Tom); Beavin, Jennifer L (Jennifer); Burns, Julie A > (Julie); Becker, Thomas (Tom); Beavin, Jennifer L (Jennifer); Burns, Julie > A (Julie); Filson, Stephanie D (Stephanie); 'informix-list@iiug.org'; > Lowry, Bret DS (Bret); Miller, Carl P (Paige); Stoddart, E Michael > (Michael); Sullivan, Patrick L (Pat); Woodward, Bruce R (Bruce) > Subject: Problems Coming !! > Sensitivity: Personal > Gang - Below is email from our Singapore SA. We can't have these > passwords changing every 45 days! Any ideas ???? > ---------- > From: Lee, Hwan Meng (Hwan Meng) > Sent: Thursday, May 04, 2000 9:42 PM > To: Bottoms, Douglas A (Doug) > Cc: Setyadhi, Ardan (Ardan); Chee, Cheok Bun Lawrence (Lawrence) > Subject: RE: Password re-set for si2061srvrp > Sensitivity: Personal > Doug - I have reset the accounts below. However, I couldn't turn password > aging off. Here's the reply from CCANS director located here: > According to the Lucent Business Assurance Instructions (LBAI) both user > and administrative passwords should be changed every 45 days. This policy > should be enforced by the operating system password aging mechanism > whenever possible. I have attached an excerpt from the LBAIs below: > 3.2.1.18 Changing Passwords > Users and Administrators must: > - change their passwords immediately whenever it is suspected their > passwords may have been compromised, > - change, and be forced to change, pre-assigned, default or temporary > passwords (password reset), during the first login session, > - and change passwords at least every 45 days. > Regards > Hwan Meng > ---------- > From: Bottoms, Douglas A (Doug) > Sent: Friday, May 05, 2000 12:21 AM > To: Lee, Hwan Meng (Hwan Meng) > Subject: Password re-set for si2061srvrp > Sensitivity: Personal > the "informix" and "srvrp" passwords need to be reset to their original > values and password aging turned off. > informix = ######## > srvrp = ######## > We will be releasing new software this weekend and will need this reset > ASAP ! > Thanks in advance. > Doug Bottoms > Phone: (404)573-5724 > Fax: (404)573-5792 > email: dbottoms@lucent.com >