6.0 Managing Passwords

Starting with NetWare 6.5 and eDirectory 8.7.3, Client provides password management tools that help administrators secure the network with stronger passwords and reduce password management by enabling end users to manage their own passwords. This set of tools is referred to as Universal Password.

With Universal Password, users can employ a single username and password to access networks, applications, devices, Internet sites, online services, portals, and more. Administrators can reduce or eliminate the task of resetting user passwords when they are forgotten or lost. Universal Password also manages multiple types of password authentication methods from disparate systems and provides extended password management capabilities. Universal Password is made possible by Novell Modular Authentication Services (NMAS), an advanced authentication technology that allows for multiple methods of authentication, including simple passwords, smart cards, biometrics, tokens, and digital certificates.

Universal Password uses eDirectory plus NMAS to create a password that is used for access to all resources. This common password type—taking the place of the combination of simple passwords, NDS passwords, and enhanced passwords in eDirectory—allows for the enforcement of strong password policies, such as minimum or maximum number of characters, a combination of alphabetic and numeric characters, and forced password reset.

In addition, password policies let users set a hint for their passwords. If a password is entered incorrectly or is forgotten, users can click the Password Help button and retrieve the hint they entered to help them remember their password. This reduces administrator time spent resetting forgotten passwords.

For more information on deploying universal passwords, see Deploying Universal Password and Managing Passwords by Using Password Policies in the Novell Password Management Administration Guide. It is important that you understand the requirements for using these advanced password policies before rolling out any password changes to your network.

The Client for Open Enterprise Server takes advantage of several of the features provided in Universal Password, including the following: