public:user_accounts

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:user_accounts [2021-11-24 13:01] – [User Accounts and Password usage] veselypublic:user_accounts [2024-10-07 14:50] (current) – [User Accounts and Password usage] marp
Line 1: Line 1:
-===== User Accounts and Password usage =====+====== User Accounts and Password usage ======
  
 ---- ----
  
-**The Charles University realm:**+{{:public:pasted:20211124-135717.png?60x60}}**The Charles University realm**
  
-{{:public:pasted:20211124-135717.png?50x50}}. For Charles University **Central Autentication Services** (**CAS**) please go to [[https://ldapuser.cuni.cz/|https://ldapuser.cuni.cz/]]+Unified access to central web services for students, staff and external users with single login and password for all services.
  
-----+<faicon fa fa-hand-o-right> For Charles University **Central Autentication Services** (**CAS**) please go to [[https://ldapuser.cuni.cz/|https://ldapuser.cuni.cz/]]
  
 +See also [[:public:institutions|Charles University and Czech Academy of Sciences resources]]
  
-**The CERGE-EI realm:** +---- 
-{{:public:pasted:20211124-140152.png}}+ 
 +{{:public:pasted:20211124-140152.png}}**The CERGE-EI realm**
  
 Every faculty and staff member as well as every student are eligible for network and email accounts. These accounts are setup by the network administrator after filling up a simple form by a new LAN user directly at the computer office on the 4th floor, room 409. ** CERGE-EI email accounts are "lifetime" accounts for all alumni, provided they are looked after by users. The size of mailboxes can be extended upon request in justified instances by contacting the Computer Office at [[helpdesk@cerge-ei.cz|]].**. Every faculty and staff member as well as every student are eligible for network and email accounts. These accounts are setup by the network administrator after filling up a simple form by a new LAN user directly at the computer office on the 4th floor, room 409. ** CERGE-EI email accounts are "lifetime" accounts for all alumni, provided they are looked after by users. The size of mailboxes can be extended upon request in justified instances by contacting the Computer Office at [[helpdesk@cerge-ei.cz|]].**.
Line 17: Line 19:
 The initial password for each account is generated and is unique. The initial password for each account is generated and is unique.
  
-==== Changing Password (Domain account) ====+ 
 + 
 +Because of security measure, CERGE-EI distinguishes between __network (domain) passwords__ and __mailserver passwords__. 
 + 
 +As a result, there are 
 + <font inherit/inherit;;inherit;;#ffff00>different passwords</font>  for your: 
 + 
 +  * **Domain Account **//**ad.cerge-ei.cz**//  (Active Directory) used for PC/network logon, Moodle/CMS, CEIS, VPN, internal web, TAS etc. [D] 
 +  * **Zimbra Mail exchange**  server account [X] 
 +  * **Zimbra Archive mail**  server account (if available) [A] 
 + 
 +===== More about passwords ===== 
 + 
 +Changing passwords, detailed info, [[:public:passwd_change#locking_the_account_and_mailbox|lock-out]] behavior etc. - see [[:public:passwd_change|How to change your CERGE-EI accounts passwords]] 
 + 
 +===== Changing Password (Domain account) =====
  
 **Option A:** **Via Windows** - once you are logged at the PC connected to CERGE-EI internal network: **Option A:** **Via Windows** - once you are logged at the PC connected to CERGE-EI internal network:
Line 34: Line 51:
   * **Register your mobile phone**  to be able to reset forgotten password   * **Register your mobile phone**  to be able to reset forgotten password
 __**Important notice:**__ __**Important notice:**__
- + <font inherit/inherit;;#c0392b;;inherit>//PWM is in test/experimental phase. Not all users are currently enabled. If you want to use it, please contact IT Office. One of the prerequisities is to have separated your email account from your domain account. It may be achieved by resetting email password via mailserver's web interface. Consult with IT before you start.//</font>
-<font inherit/inherit;;#c0392b;;inherit>//PWM is in test/experimental phase. Not all users are currently enabled. If you want to use it, please contact IT Office. One of the prerequisities is to have separated your email account from your domain account. It may be achieved by resetting email password via mailserver's web interface. Consult with IT before you start.//</font>+
  
 – –
Line 41: Line 57:
 **PLEASE, do not try to change Domain account password via Zimbra webmail,**  it could lock your network account in some cases. **PLEASE, do not try to change Domain account password via Zimbra webmail,**  it could lock your network account in some cases.
  
-==== Sharing identity? ==== +===== Sharing identity? ===== 
- + <font inherit/inherit;;#d35400;;inherit>**REMEMBER!**</font>
-<font inherit/inherit;;#d35400;;inherit>**REMEMBER!**</font>+
  
 **Account identified by username is allocated personally to you**, you are not allowed to lend it to other people. You are responsible for the activities under this identification. **Account identified by username is allocated personally to you**, you are not allowed to lend it to other people. You are responsible for the activities under this identification.
  
-==== Password complexity requiremets ====+===== Password complexity requiremets =====
  
 Our security settings require that users' passwords meet **complexity requirements**  and they are enforced when passwords are changed or created. Our security settings require that users' passwords meet **complexity requirements**  and they are enforced when passwords are changed or created.
Line 53: Line 68:
 Complexity requirements are listed in the [[:public:passwd_change|Password Change]] article. Complexity requirements are listed in the [[:public:passwd_change|Password Change]] article.
  
-==== Password usage tips ====+===== Password usage tips =====
  
 It's highly recommended to use **strong passwords**, which **does not contain**  the __user or company name__, __real name__  or a complete __dictionary word__. It's highly recommended to use **strong passwords**, which **does not contain**  the __user or company name__, __real name__  or a complete __dictionary word__.
  • /var/www/html/dokuwiki/data/attic/public/user_accounts.1637758915.txt.gz
  • Last modified: 2021-11-24 13:01
  • by vesely