Password aging etc...
We're in the process of exposing our jazz instance to the outside world (our customers). As part of the security concerns we need to implement some password aging and usage (not the same as the previous pwd, lenght, upper/lower mix, etc..)
We are using tomcat.
Any other implications that thi smay envoke?
Accepted answer
Comments
Can you tell me if IBM's WAS supports this?
As for using a LDAP server - I'm not that familar with it but in our org we need to support users from 2 separate stand-alone AD forests (a bussiness and dev networks) as well as external users (other companies - our customers).
We are in the process of enabling JAZZ access to our customers (raising defects, collaborating on requirements) using a F5 device . Our security group has identified some concerns, password security features being one of them.
I'm not aware WebSphere has features such as prompting a user to change a password before expiry.
One other answer
Hi Norman,
The JTS server does not handle the authentication of the users, this is handled through the application server itself. In your case, you're using the Apache Tomcat as the application server, I have not been able to find a way to configure Tomcat to set a password expiration or to set a certain length. One thing you can do is to post the question on the Apache Tomcat forums and see if this is possible.