From 4b3923b20f158537f61a7ed218fb32b949baa82f Mon Sep 17 00:00:00 2001 From: mattf Date: Wed, 2 Sep 2020 01:41:14 +0000 Subject: [PATCH] Added more password security tools to the ENCRYPTED_PASSWORDS.txt document git-svn-id: svn://192.168.202.10@3289 3d104415-ff17-0410-8863-d5cf3c621b8a --- agc_2-X/trunk/docs/ENCRYPTED_PASSWORDS.txt | 29 +++++++++++++++++++++- 1 file changed, 28 insertions(+), 1 deletion(-) diff --git a/agc_2-X/trunk/docs/ENCRYPTED_PASSWORDS.txt b/agc_2-X/trunk/docs/ENCRYPTED_PASSWORDS.txt index a05f1324..f295a382 100644 --- a/agc_2-X/trunk/docs/ENCRYPTED_PASSWORDS.txt +++ b/agc_2-X/trunk/docs/ENCRYPTED_PASSWORDS.txt @@ -1,9 +1,11 @@ -ENCRYPTED PASSWORDS DOC Started: 2013-07-09 Updated: 2014-12-31 +ENCRYPTED PASSWORDS DOC Started: 2013-07-09 Updated: 2020-09-01 NOTE: THIS FEATURE IS OPTIONAL, AND SHOULD ONLY BE ACTIVATED AFTER YOUR SYSTEM HAS BEEN INSTALLED, CONFIGURED AND TESTED! +NOTE: Additional password security features are mentioned at the bottom of this + document. INSTALL: @@ -72,3 +74,28 @@ You can also use the above command to generate a new password hash if you have forgotten your password and update the database with the new value manually: UPDATE vicidial_users set pass_hash='kfYvywV959fn09rSZML70wHjjxsaYjm' where user='123'; + + + +ADDITIONAL USER SECURITY TOOLS: +1. Passwords can now be up to 100 characters: According to new NIST password security guidelines, the length of a password is the single most important point in the security of that password. +2. Minimum password lengths: This setting will require that user passwords, phone and server passwords, and system settings default passwords be at least this minimum length of characters when those records settings are modified on the Modify pages. There is also a "PASSWORD LENGTH" indicator on the Modify pages to show you how long a password is as it is being typed. +3. Add an automated process that can deactivate accounts that have not been logged in to in over X number of days(see below) + + + +NOTE: This is something an Admin will have to set up on your system. + + +Here's an example that will set users to active=N if they haven't logged in in the last 90 days - + + +Create a Settings Container called "SQL_set_inactive_users" with the following as the Container Entry: + +UPDATE vicidial_users SET active='N' where last_login_date < CONCAT(DATE_ADD(NOW(), INTERVAL -90 DAY)) and user!='6666'; + + +Have the Admin add this CRONTAB entry on only one dialer in your cluster: + +### set users active=N if they haven't logged in in the last 90 days, run at 2:00am every day +0 2 * * * /usr/share/astguiclient/AST_settings_container_SQL.pl --container=SQL_set_inactive_users -q