CLASSE Password Requirements
CLASSE has the same password requirements as does Cornell's central IT organization. See
http://www.it.cornell.edu/security/identity/passwords/strong.cfm for a description of Cornell's requirements and suggestions for generating a password.
Briefly, CLASSE passwords have requirements enforced by builtin Kerberos policies.
The default policy requires a minimum of 8 characters from at least 3 classes. The
five possible classes are lowercase, uppercase, numbers, punctuation, and all
other characters.
Also, a password may not be
- a previously used password
- a single word or proper name found in any dictionary
- a single word or proper name found in any dictionary spelled backward
- a word found in a dictionary but with its letters replaced by visually similar numbers or symbols (aka leet speak -- see http://en.wikipedia.org/wiki/Leet )
- some common two-word combinations
CLASSE User Accounts and Passwords
When you first set up a CLASSE account, you must also link it to
CLASSE Duo.
For a detailed description of computer accounts at CLASSE, please see
DetailedUserAccountsAndPasswords
When you change your passwords, you must include characters from
at least 3 of the 4 character classes: upper case, lower case, numbers
and special characters. See
CLASSE Password Requirements below.
1. CLASSE authentication (Microsoft kerberos)
CLASSE authentication is used for
Your CLASSE account must be renewed periodically, usually every two (2) years. You will get an e-mail notice to renew.
To change your CLASSE password, you can use any of these five (5) alternatives:
- From any computer, use your Web browser to go to
- From a CLASSE Windows computer:
- login using your CLASSE userid and current password
- press CTRL-ALT-DEL
- click on the line Change a password...
- from a CLASSE Linux computer (e.g. LNX201.CLASSE.CORNELL.EDU )
- open a terminal window
- type the command kpasswd
- from a Mac on a CLASSE network (e.g. "LNS Protected") or on the CLASSE VPN
- open a terminal window
- type the command kpasswd yourclasseuserid@CLASSE.CORNELL.EDU
- this command is case sensitive. You must type @CLASSE.CORNELL.EDU in capital letters.
CLASSEPasswordLandingPage