Setting Up User Password Check

To set up user password check, use the Password Policy tab in the Policies Editor section on the navigation panel.

NOTE. When roles of information security administrator and application administrator are separated, the Policies Editor tab is available only for information security administrator.

Lock User after Specified Number of Failed Logins. Selecting the checkbox allows to set the number of failed login attempts which are followed by the locking of the user and showing the appropriate message on starting Foresight Analytics Platform. This option takes into account error login or password inputs and protects from password mining. Specify the number of failed attempts in the editor next to the checkbox.

NOTE. User locking after the specified number of failed login attempts is used for all existing and non-existing users in DBMS and in the security manager. When an incorrect login or password is entered, the non-existing user will also be locked. To unlock such a user, create its user account in the security manager and deselect the Lock Account checkbox in user properties. This locking feature prevents from detecting existing users via login and password mining.

Reset Counter of Failed Logins in the Specified Number of Minutes. Selecting the checkbox enables the user to specify a time interval (in minutes), after which a failed login count is reset. The number of minutes is indicated in the editor next to the checkbox. For example, a user can be locked after three failed login attempts. After the second failed attempt a user may wait the required time, and after that he has three more login attempts. If the number of failed logins is higher than the set threshold value, the user is locked.

Set Minimum Password Length (Characters). Selecting the checkbox enables the user to set the minimum password length (characters). To specify the minimum password length, use the editor next to the checkbox.
Set Maximum Password Age (Days). Selecting the checkbox enables the user to set the maximum password age, when it expires, the user needs to change password.

Warn about Expiration in a Specified Number of Days. Selecting the checkbox enables the user to set the number of days the users are warned of password age in days before the password expires. If required, the user can change password using in the Change Password dialog box by means of an information message.

Set Minimum Password Age (Days). Selecting the checkbox enables the user to set the maximum password age, during which the user is forbidden to change the password.

NOTE. Maximum or minimum password age can be undone by the Password Never Expires checkbox of the particular user.

User Name and Password must Differ. When selecting the checkbox note that user name and password must differ.
User Full Name and Password must Differ. When selecting the checkbox note that user full name and password must differ.

Deny Using Passwords Consisting of the Same Characters. If the checkbox is selected, the user cannot use a password consisting of the same characters.
Deny Using Passwords Consisting of Letters of the Same Case. If the checkbox is selected, the user must use a password consisting of letters of different cases.
Password must Contain Numbers and Letters. If the checkbox is selected, the user password is checked for presence of letters and numbers.
Password must Contain Special Characters (_,@, #,$,%,&,*,^). If the checkbox is selected, user password is checked for existence of special characters.

Check Minimum Difference Between New Password and Old One (Characters). Selecting the checkbox prevents a new user password matching with the old one. The number of characters is selected in the value editor next to the checkbox.
Check if New Password Matches the Old One (Number of Passwords). Selecting the checkbox enables the user to store user password history and to prevent the new password from matching fully the old one. To specify the number of stored and checked old passwords, use the number editor next to the checkbox. Deselecting this checkbox clears the stored list of user’s old passwords.

NOTE. The user password changed by the administrator is not saved in the password history.

Check Maximum Number of Repeated Characters. Selecting the checkbox enables the user to use the specified number of repeated characters in a password. The number of characters is selected in the value editor next to the checkbox.
Check Password for Forbidden Strings. Selecting the checkbox enables the user to check if the user password includes forbidden strings. The check is executed when a password is changed. Forbidden strings are shown in a list under the checkbox. The list is available only if the checkbox is selected:
- To add a forbidden string in the desktop application:
- - Click the Add button.
  - Press the INSERT key.
  - Double-click the empty space.
  - Select the Add context menu item of the forbidden strings list.

After that a new item is added to the list. The item text can be edited. Specify the text for the forbidden string:

To save changes, press the ENTER key or double-click the empty space. Press the ESC key to cancel adding a forbidden string.

- To edit the selected forbidden string in the desktop application:
- - Click the Edit button.
  - Select the Edit context menu item of the forbidden string.
  - Double-click the forbidden string.

The forbidden string becomes available for editing. To apply changes, press the ENTER key or double-click the free space. Press the ESC key to cancel editing the forbidden string.

- To delete selected forbidden strings in the desktop application:
- - Click the Delete button.
  - Select the Delete context menu item.
  - Press the DELETE key.

Following this a dialog box requiring confirmation of these actions opens.

Multiple strings can be selected by holding down the CTRL key.

Select the Clear context menu item to delete all strings.

- To select all strings in the desktop application:
- - Select the Select All context menu item.
  - Press CTRL+A.

NOTE. In the web application, forbidden strings are entered in text format and are separated with spaces, commas, or semicolons.

NOTE. If section parameters have been changed, an attempt to go to another section of the security manager or to close it displays a request to apply changed settings.