ProHoster > Blog > Utongi > Kugadzirisa Password Chengetedzo Policy muZimbra

Kugadzirisa Password Chengetedzo Policy muZimbra

Pamwe chete nekunyorera maemail uye kushandisa siginecha yedhijitari, imwe yedzakanyanya uye inodhura nzira dzekudzivirira email kubva pakubira ndiyo inokwanisa password kuchengetedza mutemo. Mapassword akanyorwa pasi pamapepa, akachengetwa mumafaira eruzhinji, kana kuti asina kuoma zvakakwana anogara ari gaka rakakura mukuchengetedzeka kweruzivo rwebhizinesi uye zvinogona kutungamira kuzviitiko zvakakomba zvine mhedzisiro inooneka kubhizinesi. Ichi ndicho chikonzero chero bhizinesi rinofanira kuve neyakaomesesa password kuchengetedza mutemo.

Kugadzirisa Password Chengetedzo Policy muZimbra

Nekudaro, chero nyanzvi yezvekuchengetedza inoziva kuti password password inongounza mhedzisiro kana isiripo chete, asi yakanyatso kucherechedzwa nemunhu wese, kana zvishoma nevashandi vakakosha vesangano. Kuita izvi kwakaoma kupfuura zvinoita. Vashandi vakatoremerwa nebasa vanogara vachikanganwa nezve kukosha kwekuchinja password yavo, kana kutora nzira yekusapikisa, nguva yega yega ichiita kuti password ive nyore uye nyore, nekudaro vachiramba mhedzisiro yacho. Ndokusaka nyaya yekutevedzera password password mumabhizinesi inowanzogadziriswa nenzira dzakasiyana dzehunyanzvi.

Iwe haudi chero chechitatu-bato zvikumbiro kuti usimbise yako Zimbra password password. Izvi zvinogona kuwanikwa uchishandisa zvakavakwa-mukati maturusi.

Kutanga, zvakakodzera kunzwisisa kuti password management inoshanda sei muZimbra. Kana account nyowani yagadzirwa, maneja anoipa password yenguva pfupi. Mushure meizvi, mushandisi achakwanisa kuzvimiririra kupinda muakaunti uye kushandura password. Ese mapassword akachengetwa mune encrypted fomu pane sevha neZimbra uye, nekuda kweizvi, haasvikiki kunyangwe kune server server. Ndokusaka, kana mushandisi akakanganwa password yake, anozofanirwa kugadzira imwe nyowani. Ngatikuyeuchidzei kuti kusvika munguva pfupi yapfuura, kugadzira password itsva kwaida kubatanidzwa kwemutungamiri, asi shanduro yezvino yeZimbra Creative Suite 8.8.9 yakawedzera kukwanisa kwevashandisi kuisa password itsva ivo pachavo.

Kugadzirisa Password Chengetedzo Policy muZimbra
Masetirwo emitemo yepassword anogona kuwanikwa muzvirongwa zvevashandisi vega uye mapoka evashandisi. Unogona kugadzirisa:

  • Kureba kwepassword - inobvumidza iwe kuseta hurefu uye hurefu hwepassword. Nekumisikidza, iyo shoma password kureba ndeye 6 mavara uye iyo yakawanda ndeye 64.
  • Password kuchembera - inobvumidza iwe kuseta nguva mushure meiyo iyo password inova isingaite. Vashandisi havafanirwe kumirira kuti password ipere; vanogona kuichinja isati yapera
  • Minimum upper case characters - inokutendera kuti uise huwandu hushoma hwemavara makuru anoshandiswa mupassword
  • Minimum lowercase characters - inokutendera kuti uise huwandu hushoma hwemavara madiki anoshandiswa mupassword
  • Mavara mashoma enhamba - inokutendera iwe kuseta huwandu hushoma hwemadijiti kubva pa0 kusvika pa9 anoshandiswa mupassword
  • Zvishoma zviratidzo zvepunctuation - inokutendera kuti uise huwandu hushoma hwezviratidzo zvepunctuation uye akakosha mavara anoshandiswa mupassword.
  • Simbisa nhoroondo yepassword - inobvumidza iwe kuseta huwandu hwemapassword kuti urangarirwe kuitira kuti mushandisi arege nguva nenguva kushandisa duplicate passwords.
  • Pasiwedhi yakavharwa - iyi sarudzo inobvumidza iwe kudzivirira mushandisi kuchinja password
  • Gonesa yakundikana yekukiya mukati - iyi sarudzo inobvumidza iwe kuti ugadzirise kuti system inoita sei pakuisa password isiriyo

Sezvauri kuona, zvigadziriso zvepassword muZimbra zvinochinjika uye zvinogona kuchinjika kune password policy yechero bhizinesi. Mukuwedzera, nekushandisa script iri nyore, unogona kuseta zviyeuchidzo kuti zvitumirwe kune vashandisi kuti password yavo ichakurumidza kupera. Nekuda kwechiyeuchidzo chakadaro, mushandi anozokwanisa kushandura password mumhepo yakadzikama, nepo tsamba yemushandi akapotsa nguva yekuchinja password isina kuvhurwa mangwanani inogona kukanganisa mashandiro ake.

Kuti chinyorwa ichi chishande, unofanirwa kuchikopa kune faira uye kuita kuti faira iri riite. Zvinokurudzirwa kuita otomatiki kuita kwechinyorwa ichi uchishandisa Cron kuitira kuti zuva nezuva chizivise vashandisi vasina kuvandudza password yavo kwenguva yakareba kuti ichakurumidza kumira kushanda. Mukuwedzera, mune script, panzvimbo ye zimbra.server.com, unofanira kutsiva zita rezita rako pachako.

#!/bin/bash
# Задаем ряд переменных:
# Сперва количество дней для первого напоминания, затем для последнего:
FIRST="3"
LAST="1"
# Задаем адрес отправителя:
FROM="[email protected]"
# Задаем адрес получателя, который будет получать письмо со списком аккаунтов с истекшими паролями
ADMIN_RECIPIENT="[email protected]"
# Указываем путь к исполняемому файлу Sendmail
SENDMAIL=$(ionice -c3 find /opt/zimbra/common/sbin/sendmail* -type f -iname sendmail)
# Получаем список всех пользователей.
USERS=$(ionice -c3 /opt/zimbra/bin/zmprov -l gaa $DOMAIN)
# Указываем дату с точностью до секунды:
DATE=$(date +%s)
# Проверяем каждого из них:
for USER in $USERS
 do
# Узнаем, когда был установлен пароль
USERINFO=$(ionice -c3 /opt/zimbra/bin/zmprov ga "$USER")
PASS_SET_DATE=$(echo "$USERINFO" | grep zimbraPasswordModifiedTime: | cut -d " " -f 2 | cut -c 1-8)
PASS_MAX_AGE=$(echo "$USERINFO" | grep "zimbraPasswordMaxAge:" | cut -d " " -f 2)
NAME=$(echo "$USERINFO" | grep givenName | cut -d " " -f 2)
# Проверяем, нет ли среди пользователей тех, у кого срок действия пароля уже истек.
if [[ "$PASS_MAX_AGE" -eq "0" ]]
then
  continue
fi
# Высчитываем дату окончания действия паролей
EXPIRES=$(date -d  "$PASS_SET_DATE $PASS_MAX_AGE days" +%s)
# Считаем, сколько дней осталось до окончания срока действия пароля
DEADLINE=$(( (($DATE - $EXPIRES)) / -86400 ))
# Отправляем письмо пользователям
SUBJECT="$NAME - Ваш пароль станет недействительным через $DEADLINE дней"
BODY="
Здравствуйте, $NAME,
Пароль вашего аккаунта станет недействительным через $DEADLINE дней, Пожалуйста, создайте новый как можно скорее.
Вы можете также создать напоминание о смене пароля в календаре Zimbra.
Заранее спасибо.
С уважением, IT-отдел
"
# Первое предупреждение
if [[ "$DEADLINE" -eq "$FIRST" ]]
then
	echo "Subject: $SUBJECT" "$BODY" | $SENDMAIL -f "$FROM" "$USER"
	echo "Reminder email sent to: $USER - $DEADLINE days left"
# Последнее предупреждение
elif [[ "$DEADLINE" -eq "$LAST" ]]
then
	echo "Subject: $SUBJECT" "$BODY" | $SENDMAIL -f "$FROM" "$USER"
	echo "Reminder email sent to: $USER - $DEADLINE days left"
# Final
elif [[ "$DEADLINE" -eq "1" ]]
then
    echo "Subject: $SUBJECT" "$BODY" | $SENDMAIL -f "$FROM" "$USER"
	echo "Last chance for: $USER - $DEADLINE days left"
fi
done

Saka, tinogona kutaura kuti Zimbra Collaboration Suite yakanyatsokodzera kunyangwe kune aya mabhizinesi akateya yakasimba password mutemo, uye nekuda kweakavakirwa-mukati mabasa, zvichave nyore kuita kuti vashandi vanyatsoomerera pazviri.

Pamibvunzo yese ine chekuita neZextras Suite, unogona kubata Zextras Representative Katerina Triandafilidi neemail. [email inodzivirirwa]

Source: www.habr.com

Voeg