Configuring internal authentication

Global Configuration

Show Detail

(Optional) Select to provide a detailed explanation to users for unsuccessful log on attempts. Clear to provide a general message such as Access Denied.

Account Lockout

Max Attempts

Type the number of unsuccessful log on attempts that are allowed before locking out users. To disable this function and prevent users from being locked out, enter 0.

Logout Trigger Duration (Minutes)

Type the number of minutes after which users who have reached the maximum number of failed attempts are locked out.

Logout Reset Duration (Minutes)

Type the number of minutes after which locked user accounts are unlocked. To disable this function and require an administrator to unlock accounts, enter 0.

Password Expiration

Expiration (Days)

Type the number of days within which users must change their password. Users who do not change their password in time are locked out.

Grace Period (Days)

Type the number of days before the Expiration date during which users are reminded to change their passwords.

Password Complexity

Min Length

Type the minimum number of characters required for a new password.

Numeric Required

(Optional) Select to require at least one number in all user passwords.

Alpha Required

(Optional) Select to require at least one letter in all user passwords.

Other Required

(Optional) Select to require at least one special character such as # !, * (non alpha numeric) in all user passwords.

No Username Substring

(Optional) Select to ensure that a user name cannot be a part of the proposed password.

External Validation Enabled

(Optional) Enables BMC Database Automation to call an external password validation script. To enable, select the check box and then type the script location path. If the script called returns a zero exit status, password changes are permitted. The following variables can be accepted on stdin:

• GA_USERNAME
• GA_OLDPASS
• GA_NEWPASS
  
  An environment variable is passed to the script only when an administrator is changing the password of another user (as opposed to their own). In this case, -a is passed to the script.