Tags

CLASSE Password Requirements

CLASSE has the same password requirements as does Cornell's central IT organization. See http://www.it.cornell.edu/security/identity/passwords/strong.cfm for a description of Cornell's requirements and suggestions for generating a password.

Briefly, CLASSE passwords have requirements enforced by builtin Kerberos policies. The default policy requires a minimum of 8 characters from at least 3 classes. The five possible classes are lowercase, uppercase, numbers, punctuation, and all other characters.

Also, a password may not be
  • a previously used password
  • a single word or proper name found in any dictionary
  • a single word or proper name found in any dictionary spelled backward
  • a word found in a dictionary but with its letters replaced by visually similar numbers or symbols (aka leet speak -- see http://en.wikipedia.org/wiki/Leet )
  • some common two-word combinations

CLASSE User Accounts and Passwords -- brief description

For a detailed description of computer accounts at CLASSE, please see DetailedUserAccountsAndPasswords

You have at least six (6) computer accounts with passwords at CLASSE. Only 2 of them are relevant to most people:
  1. CLASSE authentication (Microsoft kerberos)
  2. Replicon (not kerberized)

Only a few people need access to these other services. For more information about them, please see DetailedUserAccountsAndPasswords
  1. LNS Unix/Linux interactive authentication (MIT kerberos)
  2. LNS Unix/Linux network authentication (MIT kerberos)
  3. VMS (not kerberized)

When you change your passwords, you must include characters from at least 3 of the 4 character classes: upper case, lower case, numbers and special characters. See CLASSE Password Requirements below.

1. CLASSE authentication (Microsoft kerberos)

CLASSE authentication is used for

Your CLASSE password must be changed at least every 999 days for it to remain valid.

To change your CLASSE password, you can use any of these five (5) alternatives:

  • From a CLASSE Windows 7 computer:
    1. login using your CLASSE userid and current password
    2. press CTRL-ALT-DEL
    3. click on the line Change a password...

  • from a CLASSE Linux computer (e.g. LNX201.CLASSE.CORNELL.EDU )
    1. open a terminal window
    2. type the command kpasswd

  • from a Mac on a CLASSE network (e.g. "LNS Protected") or on the CLASSE VPN, or from an LNS Unix computer (e.g. LNS101.LNS.CORNELL.EDU )
    1. open a terminal window
    2. type the command kpasswd yourclasseuserid@CLASSE.CORNELL.EDU
      • this command is case sensitive. You must type @CLASSE.CORNELL.EDU in capital letters.

2. Replicon

  • Configuring your password for CLASSE's Replicon time accounting software is described on the Wiki page RepliconQuickstart. The program can be accessed on the Replicon server.

3. LNS authentication

A few legacy services still use LNS authentication, which has separate "interactive" and "network" passwords.
  • To change your LNS interactive password (i.e. the password associated with your LNS Kerberos principal)
    1. login interactively (i.e. ssh to or use PuTTY to login on) LNS101.LNS.CORNELL.EDU using your LNS interactive userid and password
    2. type the command
      • kpasswd
    3. provide your current LNS interactive password
    4. twice provide your new LNS interactive password
  • To change your LNS network password (i.e. the password associated with your LNS /net Kerberos principal)
    1. login interactively (i.e. ssh to or use PuTTY to login on) LNS101.LNS.CORNELL.EDU using your LNS interactive userid and password
    2. type the command
      • knetpw
    3. provide your current LNS interactive password
    4. twice provide your new LNS network password
Topic revision: r73 - 15 Mar 2020, DevinBougie
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding CLASSE Wiki? Send feedback