NetWare managers have long wished for more tools in the area of password policies. For more than a decade, NetWare has allowed administrators to set minimum password length and to specify the frequency of password changes. But, as any good security officer will tell you, there's so much more to a really good password policy.
Connectotel recently released a new version of its Password Policy Manager for Novell Directory Services (NDS). This is a security add-on for administrators of NetWare, as well as Windows NT, Solaris and Linux-based networks when using NDS eDirectory, which provides centralized management and real-time enforcement of password policies.
Among the criteria that can be configured by the NDS administrator are:
- Minimum and maximum password length.
- Minimum and maximum number of alphabetic characters.
- Minimum and maximum number of numeric characters.
- Minimum and maximum number of punctuation characters.
- Maximum consecutive character types (alphabetic/numeric/punctuation).
- Maximum instances of any character.
- Algorithm comparison with old password.
- Synchronization with local workstation password.
The Password Policy Manager administrator is implemented as a NetWare administrator snap-in for use with Windows 95/98, NT and 2000 clients. There also is user software, implemented as a client-side snap-in for use with Windows 95/98, NT and 2000.
Network security and the use of strong authentication methods should be discussed and implemented in your enterprise. Using Password Policy Manager can help increase network security by enforcing the use of strong passwords. For more on the use of - and need for - strong passwords and the theory behind password policy management, see Novell's AppNote, "Implementing Strong Passwords in an NDS Environment," at: developer.novell.com/research/appnotes/2000/a0008.htm
RELATED LINKS
Dave Kearns is a writer and consultant in Silicon Valley. His most recent book is "Peter Norton's Complete Guide to Networks" published by SAMS. Dave's company, Virtual Quill, provides content services to network vendors: books, manuals, white papers, lectures and seminars, marketing, technical marketing and support documents. Virtual Quill provides "words to sell by..." Find out more at Virtual Quill or by e-mail at info@vquill.com
NetWare archive
Past newsletters.
Password Policy Manager evaluation software can be downloaded here.
New Synchronicity
Network World Directories Newsletter, 05/10/00
Adding biometric authentication to NetWare
Network World, 07/17/00
Axent takes another whack at Web access control
Network World, 09/25/00
Subscribe to Network World's Security newsletter
Archive of Network World on Novell NetWare newsletters
