Re: Password aging

[Cal Frye <cjf () CALFRYE COM>]

Seruya, Stewart wrote:

> I’m trying to get a sense on how many have a university-wide Password
> policy.  Second, do any have a password aging rule?

Where we can enforce a password policy, we attempt to do so. Our mail
and web systems insist on length between 6 and 8 characters and not a
dictionary word. They expire quarterly. Other systems are more lax, to
varying degrees.

As we converge on "coordinated passwords" (sort of like single sign-on,
but achieved through synchronization rather than true SSO), the risk of
losing one's password becomes greater the more it's shared among
systems, so this is a timely discussion for us.

--
--Cal Frye, Network Administrator, Oberlin College
 www.ouuf.org, www.calfrye.com

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.