Question Progress password rules

[BeanTee]

Hi,

this is my first ever post in this forum.
is there any password rules configuration at progress level? For example, password has to be minimum 8 characters.

my system is running on progress 10.1b.

Bean.

 

[Rob Fitzpatrick]

Welcome to ProgressTalk! The OpenEdge database doesn't have any native password complexity or history rules; I assume you are talking about users in the _User table.

That said, best practice these days is to keep your user credentials stored outside of the database and define an external authentication domain. Have a look at the documentation for the CLIENT-PRINCIPAL object if you want to move in that direction.

If you have an application table in your database where you store users and hashed passwords, and if you have the ability to change your application's code, then you can certainly implement password complexity and history in business logic. But you will have to think about compensating controls to prevent access to that table from outside your application, e.g. a Procedure Editor connected to the database.

 

[BeanTee]

Thanks Rob.
We have implimented password complexity at application level. Just curious whether there is any control at Progress level as i can't find any. Thus, i assume there is none. Thanks for your confirmation.