Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

Notifications
Clear all

Password

11 Posts
3 Users
0 Reactions
2,315 Views
(@michelostro)
Posts: 11
Active Member
Topic starter
 
[#9312]

Hello,
I am administrateur and i create the users for a new project,
Which is the password by default and how can parameter it. 

Thanks 
Michel


 
Posted : 13 Feb 2024 18H44
(@cecile)
Posts: 161
Active Member Admin
 

Hello,
I think you can find the answer on the online Manual of ProjeQtOr, on the Users page, section Miscellanous

Hope this helps.


 
Posted : 13 Feb 2024 18H52
(@michelostro)
Posts: 11
Active Member
Topic starter
 

thanks for your answer but it's not enough. I would like create user with a easy password as by exemple the name and not a complex as the button reset password give.
Thnak you


 
Posted : 13 Feb 2024 18H58
(@cecile)
Posts: 161
Active Member Admin
 

Hello,
Sorry, but ProjeQtOr takes security seriously.

1) when you create a user, the password is temporary and supposed to be changed by the user on first connection.
2) the concept of an "easy password" is the opposite of any security rule
3) if you want to control the passwords your give to your users, you can use a LDAP.


 
Posted : 13 Feb 2024 19H07
(@michelostro)
Posts: 11
Active Member
Topic starter
 

Don't worry, i'm convinced that projeQTor takes security seriously and me too, but I plan to use the parameters with a easy password at the first connexion and after to oblige to change it.
My question : I create an user, i sent him a email to inform that his account is create, which information could give him for the first access.


 
Posted : 13 Feb 2024 19H17
(@michelostro)
Posts: 11
Active Member
Topic starter
 

Hello, no answer ?


 
Posted : 15 Feb 2024 11H55
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Hello, no answer ?

Yes, when we have time.

Please note that as this is free support, when someone is not happy with speed of treatment, we systematically slow down and delay our answser.


 
Posted : 15 Feb 2024 12H23
(@michelostro)
Posts: 11
Active Member
Topic starter
 

Ok, I know it's a free support, after two days without return (I did'nt work the last two days), I just wanted like news about my request. Sorry if you don't appreciate the tune of my question.


 
Posted : 15 Feb 2024 12H31
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

My question : I create an user, i sent him a email to inform that his account is create, which information could give him for the first access.

On user screen, you have magic buttons
 

Reset password will ... reset the password and show you new value.
So you can easily copy it to send information to user.

Send information to user will ... send credentials to user, including password.
Note that you can change the message sent in Global Parameter screen.

Moreover, you can reset password through multiple update.
This will automatiwally send information to all concerned users.


 
Posted : 15 Feb 2024 13H34
(@michelostro)
Posts: 11
Active Member
Topic starter
 

Thank you for your answer,
Idea for an future evolution : create an user with a no complex password as by example password identic with username and at the first connexion, the user is obliged to change it. So we avoid to copy the complex password and we avoid to ask the user to enter the complex password as "NA4DJqJWXPOK".
Thank you again, the subject is closed for me.


 
Posted : 15 Feb 2024 13H58
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

create an user with a no complex password as by example password identic with username and at the first connexion, the user is obliged to change it

No, absolutely no.
This is a serious security leak that we will not introduce.
With an easy password, as long as the user does not connect to change the password (for instance if he is on holidays for few weeks), anyone can connect to your instance and steal data. So definitive answer is No.

NB If you want to setup poor passwords, you can link projeqtor to LDAP or SSO, so this is these systems that will manage passwords (but I'm not sure they will allow easy passwords)
 


 
Posted : 15 Feb 2024 14H05
Share:

Scroll to Top