New Authentication Software Installed on Gladstone,
Darkwing, Oregon
New programs pre-crack requested passwords and use PACs instead
of birthdates
Last month, Computing Center staff installed new versions of account-creation
and password-changing programs.
These programs introduce two new features:
- They use CRACKLIB routines to test requested passwords for vulnerability.
- The programs will no longer accept birthdates as minimum-security second
pieces of authentication. Instead, only Personal Access Codes (PACs) will
be accepted. This is true for all campus users, including faculty and staff.
(Last term, all UO faculty and staff were issued PACs for DuckWeb to give
them access to their employee information online. If you don't know your PAC
or have misplaced it, come in person to the Human Resources office in Room
463 Oregon Hall and bring your photo ID.)
One very welcome feature of this change is that users with new accounts are no
longer prompted to change their passwords at first login.
