Re: OTRS agent Password Policy

Rose Dowson <[email protected]>
Newsgroups gmane.comp.otrs.user
Message-ID <CAA3LwtZ2F_i8dcEk=o528RtZRdOHC0cVn55yDJ7m=wnss0WH8A@mail.gmail.com>
Hi,

   Thank you very much. Just one more question please : I set the
'PasswordTTL' => '1' to check if it works correctly but I haven't any
result when I set my agent password I could log in normally.
So, it seems I missed something.
Could you tell me please how could I check this ?

Best Regards.

2017-02-22 12:50 GMT+01:00 Chris Ellam <[email protected]>:

> Hi Rose,
>
> I guess you could edit ZZZAuto.pm, find $Self->{'PreferencesGroups'}->{'Password'}
> =  {
> and then add after PasswordRegExp the following
>   'PasswordTTL' => '90',
>   'PasswordHistory' => '3',
>   'PasswordWarnBeforeExpiry' => '5',
>
> Then delete the cache
>  ~otrs/bin/otrs.Console.pl Maint::Cache::Delete
>
> You should now have all your entries for the password settings.
> The exception list is in Sysconfig OTRSPasswordPolicy in the Subgroup
> Exceptions.
>
> have fun,
>
> Chris
>
> ------------------------------
> *From: *"Rose Dowson" <[email protected]>
> *To: *"User questions and discussions about, OTRS." <[email protected]>
> *Sent: *Tuesday, February 21, 2017 5:14:07 PM
> *Subject: *Re: [otrs] OTRS agent Password Policy
>
> Hi,
>
>   Thank you for the answer, I added the OTRS Password Policy could you see
> the settings in the attached file.
> I haven't  these two options the password history and Password Max Valid
> Time In Days. So, I want to add them but I couldn't.
>
> Miss some thing ?
>
> Best regards.
>
>
>
> 2017-02-21 16:50 GMT+01:00 Chris Ellam <[email protected]>:
>
>> Hi Rose,
>>
>> the first can be achieved through the standard agent preference group by
>> setting PasswordMinSize to 15,
>> for lower and upercase its the regex in PasswordRegExp
>> '((?=.*\\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[\\W]))' note this also include a
>> digit.
>>
>> For change every 90 day and the password history you need an additional
>> package OTRSPasswordPolicy
>> here set PasswordTTL to 90 and PasswordHistory to 3.
>>
>> The are othere things you may want to do like setting the days to warn
>> before expiry PasswordWarnBeforeExpiry and exceptions to to TTL and history.
>>
>> The same can be done for customers too, in their preferences.
>>
>> cu,
>>
>> Chris
>> ------------------------------
>> *From: *"Rose Dowson" <[email protected]>
>> *To: *[email protected]
>> *Sent: *Tuesday, February 21, 2017 4:34:00 PM
>> *Subject: *[otrs] OTRS agent Password Policy
>>
>> Hi,
>>
>>     How do I enforce an agent password policy of say:
>>
>>          - length 15 chars - upper/lower case - symbol
>>          - change every 90 days
>>          - Password History 3
>>
>> I want to do this for all otrs agents.
>>
>> Does anyone know the solution?
>>
>>
>>
>>  Regards,
>>
>>
>> ---------------------------------------------------------------------
>> OTRS mailing list: otrs - Webpage: http://otrs.org/
>> Archive: http://lists.otrs.org/pipermail/otrs
>> To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs
>>
>> ---------------------------------------------------------------------
>> OTRS mailing list: otrs - Webpage: http://otrs.org/
>> Archive: http://lists.otrs.org/pipermail/otrs
>> To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs
>>
>
>
> ---------------------------------------------------------------------
> OTRS mailing list: otrs - Webpage: http://otrs.org/
> Archive: http://lists.otrs.org/pipermail/otrs
> To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs
>
> ---------------------------------------------------------------------
> OTRS mailing list: otrs - Webpage: http://otrs.org/
> Archive: http://lists.otrs.org/pipermail/otrs
> To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs
>

---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/mailman/listinfo/otrs
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.