Baker, Mike L. <mailto:[log in to unmask]> wrote:
> Does anyone know if VESoft Security/3000 will allow (well, force is a
> better word) users to be required to use strong passwords (*&^%$#@
> characters and such) ??
>
> Mike Baker

Here's a whole set of draconian password settings we use in Security/3000:

 -HTH,
   Chris Bartram

(* $VEPASS-FORBID "ALPHA(P)" "Password cannot be entirely alpha" *)
$VEPASS-FORBID "NUMERIC(P)" "Password cannot be entirely numeric"
$VEPASS-FORBID "MAXCONSECUTIVE(P)>=3"
  "Password cannot contain 3 or more consecutive identical chars"
$VEPASS-FORBID "P=SESSION OR P=USER OR P=ACCOUNT"
  "Password cannot be the same as the session, user, or account"
$VEPASS-FORBID "ACCOUNT<>'@' AND P=VEACCTINFO(ACCOUNT).PASSWORD"
  "Password cannot be the same as the MPE account password"
$VEPASS-FORBID "P=VEUSERINFO(HPUSER+'.'+HPACCOUNT).PASSWORD"
  "Password cannot be the same as the MPE user password"
$VEPASS-FORBID "BADPASSWORD(P)" "Password is too easy to guess"
$VEPASS-FORBID "P=HPUSER" "Password cannot be your user name"
$VEPASS-FORBID "P=HPACCOUNT" "Password cannot be the account name"

(* MPE Password rules *)

$MPE-OBSOL @.@[log in to unmask]
$MPE-OBS-DAYS 45
$MPE-WARN-DAYS 7
$MPE-A-OBS-DAYS 9999
$MPE-A-WARN-DAYS 7
$MPE-OBS-PASSCHG ON
$MPE-WARN-PASSCHG OFF
$MPE-PASSHIST-DAYS 120
$MPE-PASS-EDIT "?????@"
$MPE-PASS-FORBID "ALPHA(P)" "Password cannot be entirely alpha"
$MPE-PASS-FORBID "NUMERIC(P)" "Password cannot be entirely numeric"
$MPE-PASS-FORBID "MAXCONSECUTIVE(P)>=3"
  "Password cannot contain 3 or more consecutive identical chars"
$MPE-PASS-FORBID "BADPASSWORD(P)" "Password is too easy to guess"
$MPE-PASS-FORBID "P=HPUSER" "Password cannot be your user name"
$MPE-PASS-FORBID "P=HPACCOUNT" "Password cannot be the account name"
$MPE-PASS-FORBID "P=VEACCTINFO(HPACCOUNT).PASSWORD"
  "Password cannot be the same as the MPE account password"

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *