I have recently updated our login policy and reduced the number of login attempts before the users account is disabled. I currently identify newly disabled accounts by monitoring the failed login attempts (email) however I would like a better way of notification. How can I discriminate between existing disabled users and newly disabled users? My guess is I need to store a list of disabled users and compare the current list with the stored list but was hoping there might be an easier way, maybe an undocumented function? --- Martin Martin_Hunter - Thu Feb 18 06:56:29 EST 2016 |
Re: Recently disabled accounts Sounds like you have found an effective way to keep yourself very busy and popular. |
Re: Recently disabled accounts There is no such data as a "disabled on" date ... Therefore storing a list of disabled users and compare with the current list is probably the only way to go here. But you should think carefully about this. DOORS security is a mess (as I stated repeatedly in other posts). Its client security (server is open) and additionally its security by obscurity. Neither of them is to be considered safe and a malicious attacker can and will break the security of your DOORS system (which goes as far as modifying baselined data without even having an account). If thats a no-go you should choose a different requirement management system. But you should not try to make DOORS "safer" by taking actions such as reducing the number of login attempts, since this only produces more work, but really does not increase the security of your system. Just my two cents on this. Regards, Mathias |