[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    RE: Password Filtering
From:       "M. Burnett" <mb () xato ! net>
Date:       2006-07-29 4:56:18
Message-ID: 003701c6b2cb$58448ab0$08cda010$ () net
[Download RAW message or body]

I believe what you are referring to is the NSA's EnPasFlt.dll filter. That
enforces passwords of at least 8 characters and 4 character sets. This is
only available to government agencies and the docs say it can handle a
maximum of 500 password changes at once. 

Another tool is Password Policy Enforcer:
http://www.anixis.com/products/ppe/default.htm. This tool has more advanced
features and is a bit friendlier to end users.

Of course, the friendliest--and mathematically equivalent--thing is to just
enforce long passwords and make the use of character sets optional. 



Mark Burnett
--------------------
"Perfect Passwords"





> -----Original Message-----
> From: Strand, John (Mission Systems) [mailto:John.Strand@ngc.com]
> Sent: Friday, July 28, 2006 2:05 PM
> To: Mueller, Daniel; focus-ms@securityfocus.com
> Subject: RE: Password Filtering
> 
> Look at the password filter in the DISA SSR .zip package... It might do
> this.
> 
> john
> 
> -----Original Message-----
> From: Mueller, Daniel [mailto:daniel.mueller@nmci-isf.com]
> Sent: Friday, July 28, 2006 12:12 PM
> To: focus-ms@securityfocus.com
> Subject: Password Filtering
> 
> Does anyone have data or tools for modifying the PASSFILT.DLL to ensure
> passwords use all 4 character sets vice 3?  New requirements at work
> require this to be enforced.
> 
> Thanks
> Dan
> 
> -----------------------------------------------------------------------
> -
> ---
> -----------------------------------------------------------------------
> -
> ---
> 
> 
> -----------------------------------------------------------------------
> ----
> -----------------------------------------------------------------------
> ----


---------------------------------------------------------------------------
---------------------------------------------------------------------------

[prev in list] [next in list] [prev in thread] [next in thread]