Password age, Password history, Minimum password length – Kofax Communication Server 9.1 User Manual

Page 20

Advertising
background image

Client Applications

Administrator‘s Manual Version 5.32.00

©Kofax, Inc.

20/203

4.1.11.1

Password Age

The maximum password age is set globally in the system file +MAIL5V/App99 on the TCOSS
server.

If the password validity period is less than 14 days, users will get a warning after login. Users
have the possibility to change their own password immediately, which resets the password
validity period.

If a password has expired, logon is only possible if the password is changed at the same time.
A check is made to ensure that the new password is different from the old one.

4.1.11.2

Password History

The password history feature ensures that a new password of a user is different from a
number of previous passwords which were valid for this account.

The password history is stored internally in the user profile. It cannot be accessed (read or
written) by any client. The password history does not show up in a user profile backup and
cannot be restored. Deleting a user profile clears the user‘s password history.

This feature requires TCOSS 7.54.00

4.1.11.3

Minimum Password Length

The minimum password length feature ensures that empty or short passwords are rejected by
the server. The required minimum password length is set globally in the system file
―+MAIL5V/App99

The check for the minimum password length is only done when the password is changed and
a new password is entered. The check does not apply to existing passwords. It is also not
active if passwords are changed by a user profile restore (because the backup only contains
the encrypted password which does not allow conclusions on the actual length of the plain text
password).

Restriction: This feature works only if clients which do password changes are updated to use
the new TCSI32.DLL release 2.48.00. Password changes on clients which use an older
TCSI32 release are processed without applying the minimum password length check. This
restriction is also caused by the password encryption.

Advertising