UM::User Management - Revision history

AlexKirhenshtein: Text replacement - "^" to "{{deprecated}}"

2022-09-13T16:14:00Z

Text replacement - "^" to "{{deprecated}}"

← Older revision		Revision as of 16:14, 13 September 2022
Line 1:		Line 1:
	Information moved to documentation:		{{deprecated}}Information moved to documentation:

	https://www.netxms.org/documentation/adminguide/user-management.html		https://www.netxms.org/documentation/adminguide/user-management.html

TatjanaDubrovica: Replaced content with "Information moved to documentation: https://www.netxms.org/documentation/adminguide/user-management.html"

2017-11-24T15:43:45Z

Replaced content with "Information moved to documentation: https://www.netxms.org/documentation/adminguide/user-management.html"

Show changes

Victor at 19:05, 4 November 2012

2012-11-04T19:05:25Z

← Older revision		Revision as of 19:05, 4 November 2012
Line 200:		Line 200:

	* To reset user's password, select user account in the list, right-click, and select "Change password..." from popup menu.		* To reset user's password, select user account in the list, right-click, and select "Change password..." from popup menu.

			= Audit =

			All important user actions are written to audit log. There are two audit logging modes - internal and external. Internal audit logging is on by default and writes audit records into table in NetXMS database. External audit logging allows sending audit records to external system via [http://en.wikipedia.org/wiki/Syslog syslog] protocol. External audit logging is off by default. Audit logging controlled by the following server configuration variables:

			{\| class="wikitable"
			\|-
			! Variable !! Description !! Default value
			\|-
			\| AuditLogRetentionTime \|\| Retention time in days for the records in internal audit log. All records older than specified will be deleted by housekeeping process. \|\| 90
			\|-
			\| EnableAuditLog \|\| Enable (1) or disable (0) audit logging. \|\| 1
			\|-
			\| ExternalAuditFacility \|\| Syslog facility to be used in audit log records sent to external server. \|\| 13
			\|-
			\| ExternalAuditPort \|\| UDP port of external syslog server to send audit records to. \|\| 514
			\|-
			\| ExternalAuditServer \|\| External syslog server to send audit records to. If set to ''none'', external audit logging is disabled. \|\| none
			\|-
			\| ExternalAuditSeverity \|\| Syslog severity to be used in audit log records sent to external server. \|\| 5
			\|-
			\| ExternalAuditTag \|\| Syslog tag to be used in audit log records sent to external server. \|\| netxmsd-audit
			\|}

			Changes to these variables requires NetXMS server restart.

Victor at 14:13, 3 November 2012

2012-11-03T14:13:40Z

← Older revision		Revision as of 14:13, 3 November 2012
Line 26:		Line 26:

	Each user can be member of several groups. Groups are the preferred way to organize access permissions. You should always grant permission to groups instead of using individual users. That way you will get a much shorter access control list which is easier to handle. Access rights from multiple groups are summarized to calculate effective user access rights.		Each user can be member of several groups. Groups are the preferred way to organize access permissions. You should always grant permission to groups instead of using individual users. That way you will get a much shorter access control list which is easier to handle. Access rights from multiple groups are summarized to calculate effective user access rights.

			=== Everyone Group ===

			NetXMS has built-in virtual group called '''Everyone'''. This group always contains all users in the system. It cannot be deleted, and it's members list cannot be edited.

	== System Access Rights ==		== System Access Rights ==

Victor: /* Password Policy */

2012-11-03T12:31:15Z

Password Policy

@@ Line 129: / Line 129: @@
 | MinPasswordLength || Default minimum password length for a NetXMS user. The default applied only if per-user setting is not defined. || 0
 |-
-| PasswordComplexity || Set of flags to enforce password complexity. || 0
+| PasswordComplexity || Set of flags to enforce password complexity. The following flags can be used:
 |-
-| PasswordExpiration || Password expiration time in days. If set to 0, password expiration is disabled. || 0
+! Value !! Description
 |-
 | PasswordHistoryLength || Number of previous passwords to keep. Users are not allowed to set password if it matches one from previous passwords list. || 0

Victor: /* Password Policy */

2012-11-03T12:18:17Z

Password Policy

← Older revision		Revision as of 12:18, 3 November 2012
Line 126:		Line 126:
	\|-		\|-
	! Variable !! Description !! Default Value		! Variable !! Description !! Default Value
			\|-
			\| MinPasswordLength \|\| Default minimum password length for a NetXMS user. The default applied only if per-user setting is not defined. \|\| 0
	\|-		\|-
	\| PasswordComplexity \|\| Set of flags to enforce password complexity. \|\| 0		\| PasswordComplexity \|\| Set of flags to enforce password complexity. \|\| 0

Victor: /* Password Policy */

2012-11-03T12:16:29Z

Password Policy

← Older revision		Revision as of 12:16, 3 November 2012
Line 133:		Line 133:
	\| PasswordHistoryLength \|\| Number of previous passwords to keep. Users are not allowed to set password if it matches one from previous passwords list. \|\| 0		\| PasswordHistoryLength \|\| Number of previous passwords to keep. Users are not allowed to set password if it matches one from previous passwords list. \|\| 0
	\|}		\|}

			Changes to these configuration variables becomes effective immediately and does not require NetXMS server restart.

	== RADIUS ==		== RADIUS ==

Victor: /* RADIUS */

2012-11-03T12:16:15Z

RADIUS

← Older revision		Revision as of 12:16, 3 November 2012
Line 140:		Line 140:
	{\| class="wikitable"		{\| class="wikitable"
	\|-		\|-
	! ~~Header text~~ !! ~~Header text~~ !! ~~Header text~~		! Variable !! Description !! Default value
	\|-		\|-
	\| RADIUSNumRetries \|\| The number of retries for RADIUS authentication. \|\| 5		\| RADIUSNumRetries \|\| The number of retries for RADIUS authentication. \|\| 5

Victor: /* Internal Password */

2012-11-03T12:15:48Z

Internal Password

← Older revision		Revision as of 12:15, 3 November 2012
Line 118:		Line 118:

	This is the default method for user authentication. Password provided by user compared against password stored in NetXMS database.		This is the default method for user authentication. Password provided by user compared against password stored in NetXMS database.

			=== Password Policy ===

			Various restrictions can be put on internal passwords to force users to choose stronger passwords. The following server configuration variables controls password policy:

			{\| class="wikitable"
			\|-
			! Variable !! Description !! Default Value
			\|-
			\| PasswordComplexity \|\| Set of flags to enforce password complexity. \|\| 0
			\|-
			\| PasswordExpiration \|\| Password expiration time in days. If set to 0, password expiration is disabled. \|\| 0
			\|-
			\| PasswordHistoryLength \|\| Number of previous passwords to keep. Users are not allowed to set password if it matches one from previous passwords list. \|\| 0
			\|}

	== RADIUS ==		== RADIUS ==

Victor at 11:51, 3 November 2012

2012-11-03T11:51:51Z

@@ Line 112: / Line 112: @@
 | View alarms || View alarms with this object as source.
 |}
 = Managing User Accounts =