Security

Contact:

HelpDesk

bsshelp@sfsu.edu

(415) 338-6793

On this page:

• BSS Domain User Account Information
• "Strong Passwords" Policy

Other relevant topics:

• Reset your password (BSSNT User Accounts)
• Password protection for faculty Web sites

BSS Domain User Account Information

Rev. 8/2006.

PLEASE NOTE: None of the information below applies to your SFSU email account NOR any home computers; both of which are totally separate and unlinked to your BSS Domain user account. This information only applies to computers on campus that logon to the BSSNT domain (including access to websites on the BSS web server).

1. 02/17/2005: Accounts and Directory Nomenclature and Best Practice
   1. all new BSSNT domain accounts will follow the first letter of first name, full last name nomenclature per my insistence a couple of months ago. Example - Name: Alex Keller User: akelle
   2. all new web directories (regardless of FP or FTP access) for personal users will have matching username and directory.
      Example - Name: Alex Keller / User: akeller / Website: http://bss.sfsu.edu/akeller
   3. because of the problems with FTP auto-navigation at login, we will need to rectify situations where the username and directory do not match. we agreed that it makes more sense to change the username than the directory name; and we are resolved to changing the usernames over the next month or two as time allows. the SYSTEMs shop (me, myself, and I) will handle the actual rectification of the username/directory deviations, and will work with the WEBTEAM to perform outreach to new and retroactively affected faculty/staff.
   4. in some cases like department or special program websites, it is not plausible to match the authors username and web directory. Example - Author: vsanders / Website: http://bss.sfsu.edu/history. in cases where username and the web directory don't or can't match and they author via FTP, they will be required to define their correct sub-directory (called "Host directory" in Dreamweaver or "Initial Remote Site Folder" in WS_FTP). if the username and web directory do not match, and they do not define the sub-directory, they will be dropped off at the root of bss.sfsu.edu and will need to navigate to their folder. irregardless of their access to the root, full NTFS permissions are applied.

"Strong Passwords" Policy

Rev. 3/2007

PLEASE NOTE: None of the information below applies to your SFSU email account NOR any home computers; both of which are totally separate and unlinked to your BSS Domain user account. This information only applies to computers on campus that logon to the BSSNT domain (including access to websites on the BSS web server).

1. Strong passwords will be enforced:
   1. Must be at least 7 characters.
   2. Must include at least one number and one special character (Non-alphanumeric for example: ! $ # % @ & ( )
   3. Cannot contain the user's account name.
   4. Password must be changed every 6 months (you will be prompted).
   5. 5 failed login attempts will lock your account for 5 minutes.
2. Example:
   1. Poor password: bssrocks
   2. Strong password: b$$r0ks! (please don't use this example!)