Passwords

Selecting:

Most of our servers and computers are directly accessible from the internet and the security of our systems starts with each of us selecting a strong and suitable password. Password selection is not always easy, you want a password that is difficult for someone else to guess, but easy for you to remember.

• Never share your password with anyone, if they need an account they should ask for an account.
• Avoid using your username as your password.
• Avoid using the same password on multiple systems.
• Avoid using dictionary words or words from other languages.
• Change your password every six months or sooner.

Some pointers for password selection:

Avoid a string of characters in succession: 123456, ABCDEF, or !@#$%^ are examples of successives.

Good passwords contain 4 character classes. Character classes are the following:

• Uppercase character
• Lowercase Character
• Symbol
• Number

An example password method is to think of a phrase and adopt it for your use:
My pet Bird Cat Jamie is 9 years old!
From the above we could use the first character of each word to give us: MpBCJi9yo!

Changing:

In order to change your password:
Windows: Press: Ctrl+Alt+Del. Select the Change Password button.

Another window box will open:

Enter your old password once.
Then your new password twice.

Linux:
[dnorwood@babyred ~]$ kpasswd
Password for dnorwood@CMPSCI.MTHOLYOKE.EDU:
Enter new password: :
Enter it again: :
Password changed.
[dnorwood@babyred ~]$

PASSWORDS ONCE MODIFIED ARE IMMEDIATELY CHANGED THROUGHOUT THE ENTIRE SYSTEM.

Adhoc:
Additional Linux commands and their respective Windows counterparts.

Some key commands are the following:

• kinit - Use this command to request a kerberos ticket, or if your ticket has expired and you need the system to re-authenticate you.
  • (Windows users: This will not occur as Windows, will re-request tickets on your behalf)
• klist - List which tickets are in your credentials cache.
  • (Windows users: There is a small icon on the right toolbar which will graphically display tickets and other information.
• kdestroy - Destroy the ticket cache, useful if you have transferred to another server and see no need to go backwards/forwards.
  • (Windows users: Using the graphical tool above you may also select "Purge all tickets".
• kpasswd - Change your password. The system will reject simple passwords, use something complex like a numeral and series of letters.
  • (Windows users: Use the process outlined above)