Ok, I've never had to create a thousand new users....

Paul M. Whitney wrote:
> In that wrapper script, you could also generate a changeme type password but
> also append some unique character to each one such as first and last letter

Or the student's ID would work (unless the college uses SSN (WHICH THEY SHOULD
NOT), in which case it's back to generating one.

> in the user login or append the UID to the password. However you approach
> it, you can still use the convention of creating multiple cookie-cutter
> passwords, but also give them "some" uniqueness to "lessen" account
> compromise.
>
> Also, you may want to automatically lock any account that is not used in
> some fixed amount of days such as 30/45/60 so something like that.

For a college, I'd think 15 or 20 days.

 mark

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@(protected)
https://www.redhat.com/mailman/listinfo/redhat-list