- SAP Community
- Groups
- Interest Groups
- Application Development
- Discussions
- login/password_max_new_valid vs login/password_max...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
login/password_max_new_valid vs login/password_max_reset_valid
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2007 Jul 19 9:22 AM
- SAP Managed Tags:
- Security
Can anyone tell me what is the best practice values in setting login/password_max_new_valid and login/password_max_reset_valid fields?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2007 Jul 19 4:49 PM
- SAP Managed Tags:
- Security
Marcy,
The exact values depend on different requirements however may places use 30 days for initial. Some places uses as short as 90 since last change up to a year.
Cheers,
Ben
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2007 Jul 19 4:45 PM
- SAP Managed Tags:
- Security
login/password_max_new_valid----
Number of days that passwords of new accounts remain valid. After an administrator creates a new account and password it is the no. of days the password is valid for even though the user has not changed it or to be more specific not logged in yet. After the specified amount of days the password is deactivated.
This is only for the new accounts.
login/password_max_reset_valid------Number of days reset passwords remain valid.
This is the no of days the user can go without resetting or changing his password after it has been reset by the administrator.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2007 Jul 19 4:49 PM
- SAP Managed Tags:
- Security
Marcy,
The exact values depend on different requirements however may places use 30 days for initial. Some places uses as short as 90 since last change up to a year.
Cheers,
Ben
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2007 Jul 20 1:14 AM
- SAP Managed Tags:
- Security
So if we were to put max new = 15 and max reset = 90, these values are considered reasonable?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2007 Jul 20 3:38 PM
- SAP Managed Tags:
- Security
Please have a kind look on <a href="https://service.sap.com/sap/support/notes/450452">SAP Note 450452</a>: refrain from using login/password_max_new_valid
