Behaviors	Top

Whenever a System Administrator assigns a password or a LabVantage User changes his password, LabVantage uses properties of the Password Validator to determine if the password meets certain criteria. Passwords are not checked against these properties during logon.

During logon, passwords are checked only to ensure that they are an exact match for the expected password. Following a successful logon:

When a "known user" (recognized by LabVantage) provides an incorrect password:

If rules defined by the Password Validator properties have changed, the user is denied logon and prompted to ensure that he changes passwords to match the new rules.

When a "known user" (recognized by LabVantage) provides an expired password:

When an "unknown user" (not recognized by LabVantage) attempts to logon, an entry is made in the Tracelog table to record the unsuccessful logon attempt and the user is denied access. Error messages for known and unknown user logon attempts are the same. As in Incorrect Passwords, item a, an email notification of the disabled user is sent to the LabVantage system administrator.

Password-Related Logon Options	Top

Set password logon options using the Security Options described in the System Configuration settings.

Password Validator Properties	Top

The Password Validator lets you define what constitutes a "valid password".

Password Encryption	Top

LabVantage installations running under JDK 1.5 or higher implement RSA password encryption (Rivest/Shamir/Adleman at MIT) using a jsbn (JavaScript Big Integer implementation) library developed by Thomas J. Wu of Stanford University (http://www-cs-students.stanford.edu/~tjw/).

Functionality:

To use the JavaScript encryption on a custom logon page, the page requires:

Password Validation in Java Methods	Top

In sapphire.accessor.ConnectionProcessor, the methods getConnectionId(), checkUser() and changePassword() call an authenticateUser routine that makes certain all of the following conditions are true:

Also in sapphire.accessor.ConnectionProcessor, the isValidPassword() method lets you ensure a user changes his password if the Password Validator criteria have changed.