Chat now with support
Chat with Support

syslog-ng Store Box 5.3.0 - Administration Guide

Preface Introduction The concepts of SSB The Welcome Wizard and the first login Basic settings User management and access control Managing SSB Configuring message sources Storing messages on SSB Forwarding messages from SSB Log paths: routing and processing messages Configuring syslog-ng options Searching log messages Searching the internal messages of SSB Classifying messages with pattern databases The SSB RPC API Troubleshooting SSB Security checklist for configuring SSB About us Third-party contributions

Setting password policies for local users

SSB can use password policies to enforce minimal password strength and password expiry. Password policies apply only to locally managed users, including the built-in admin and root users. They have no effect on users managed from an LDAP database, or if you authenticate your users to a RADIUS server.

The following describes how to create a password policy.

To create a password policy

  1. Navigate to AAA > Settings.

    Figure 46: AAA > Settings > User database — Configure password policies

  2. Verify that the Authentication method is set to Password provided by database and that the User database is set to Local.

    NOTE:

    If the setting of these fields is different (for example LDAP or RADIUS), then SSB manages the passwords of the admin and root users locally.

  3. Set how long the passwords are valid in the Password expiration field. After this period, SSB users will have to change their password. To disable password expiry, enter 0.

  4. To prevent password-reuse (for example, when a user has two passwords and instead of changing to a new password only switches between the two), set how many different passwords the user must use before reusing an old password.

  5. To enforce the use of strong passwords, select the level of password-complexity from the Minimal password strength field. As you type, SSB shows the strength of the password under the password field.

    NOTE:

    The strength of the password is determined by its entropy: the variety of numbers, letters, capital letters, and special characters used, not only by its length. A strong password must have at least 12 characters, including lowercase and uppercase letters, numbers, and special characters.

    The Enable cracklib option executes some simple dictionary-based attacks to find weak passwords.

  6. Click Commit.

    NOTE:

    If you increase the Minimal password strength, users whose existing password is weaker than required are forced to change their passwords immediately after their next login. The new passwords must comply with the strength requirements set in the password policy.

Related Documents