6.1. Password management

This chapter covers password management in Nubus for UCS.

Important

If your domain has Samba installed through the Active Directory Domain Controller app, you have two password policy systems, UDM and Samba domain. Univention recommends configuring them identically.

Password policies

It describes the different policy types in Nubus for UCS: the UDM password policy and the Samba domain password policy. It explains when each policy applies and how users can change their password through the Portal, End User Self Service, Microsoft Windows, or Kerberos. It also covers the available password policy settings and the UCR variables for password quality checks.

Samba domain password policy

It describes the Samba domain object for configuring password requirements in a Samba-enabled domain, including password length, history, age, and complexity settings.

Password hashes

It describes how Nubus for UCS stores and hashes user passwords. It covers the default SHA-512 hashing method and the optional bcrypt hashing method, including its activation requirements and tuning parameters.

End User Self Service

It describes the installation, configuration, and features of the End User Self Service, including contact information management, user self-registration with email verification, and user deregistration.

Contents

• 6.1.1. Password policies
  • 6.1.1.1. Password policy types
  • 6.1.1.2. Change the user password
  • 6.1.1.3. Password policy settings
• 6.1.2. Samba domain password policy
• 6.1.3. Password hashes
  • 6.1.3.1. Default hashing method
  • 6.1.3.2. bcrypt hashing method
  • 6.1.3.3. bcrypt settings
• 6.1.4. End User Self Service
  • 6.1.4.1. Installation and activation
  • 6.1.4.2. Contact information
  • 6.1.4.3. User registration
    • 6.1.4.3.1. Registration form
    • 6.1.4.3.2. Email verification
    • 6.1.4.3.3. Account activation
  • 6.1.4.4. User deregistration
    • 6.1.4.4.1. Deregistration request
    • 6.1.4.4.2. Account cleanup