Re: Locking accounts

Article View: comp.admin.policy

Article #7

From: Paul Hubbard
Date: Thu, 29 Oct 1992 19:14

18 lines
1201 bytes

In article <1992Oct28.154433.12770@ms.uky.edu> morgan@ms.uky.edu (Wes Morgan) writes:
>dave@lacerta.unm.edu (Dave Grisham) wrote:
>>Does any site lock accounts that their password guesser guesses? --grish
>
>If my guesser successfully breaks a user login, I send email to that user,
>telling them to change their password; I also give a bit of guidance for
>"good password selection".  
>
>This continues until they pick a password that my guesser doesn't break.
>

Our policy here is about the same except we send a combination of e-mail
and paper mail.  The first and third warnings are sent by e-mail.  The
second is paper mail.  If I crack the password a forth time, I change
the encrypted password to the date.  (We run crack once a week.)

-Paul Hubbard
 Occidental College

Technical Details

Message-ID: <1992Oct29.191424.9277@cheshire.oxy.edu>

Path: arc1-ca.pugleaf.net!sparky!uunet!hela.iti.org!usc!cheshire.oxy.edu!paul

References: <wp5p#-#@lynx.unm.edu> <1992Oct28.154433.12770@ms.uky.edu>

Show Full Headers

Complete Article Headers

Newsgroups: comp.admin.policy
Path: arc1-ca.pugleaf.net!sparky!uunet!hela.iti.org!usc!cheshire.oxy.edu!paul
From: paul@cheshire.oxy.edu (Paul Hubbard)
Subject: Re: Locking accounts
Message-ID: <1992Oct29.191424.9277@cheshire.oxy.edu>
Organization: Occidental College, Los Angeles, CA 90041 USA.
References: <wp5p#-#@lynx.unm.edu> <1992Oct28.154433.12770@ms.uky.edu>
Date: Thu, 29 Oct 1992 19:14:24 GMT
Lines: 18

Reply to Parent Message