| Table of Contents |
|---|
| Children Display | ||
|---|---|---|
|
Introduction
| English |
|---|
The Security Enhanced Directory Manager features enhanced security and control on user management.
Once SEDM is configured, stronger password encryption for local accounts will take over. Be careful when disabling SEDM plugin, as this will cause all local passwords to be invalid Simply go to System Settings -> Directory Manager Settings to enable and configure. |
...
Figure 1: Security Enhanced Directory Manager Properties
| Name | Description / Sample Value | ||
|---|---|---|---|
Show Login Info | Enable this feature will display the info such as : Last Login Date | ||
Failed Login Attempts for Account Lockout | You may set on how many attempt for the user to input the correct password before being lockout due to incorrect password. | ||
| Account Lockout Period (Minutes) | Once the user have been locked-out on failed attempt, this field will set a period of time (minute) disabling the user to login. | ||
| Allow Session Timeout (Inactivity Timeout) | Toggle this feature for automatically logging out inactive user and prompt the user to log in again. | ||
| Hard Session Timeout (Hours) | Set a period of time (Hours) for inactivity session for user to be locked out | ||
| Multi-Factor Authenticator | Default Multi-Factor Authenticator (MFA) that can be selected is : Time-based One-time Password (TOTP).
|
|
...
| Panel | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| |||||||||
Once the plugin is enabled, users' password would be stored using a new encryption method. Disabling the plugin would cause all the users not to be able to login anymore as the default encryption method is effectively changed. If you decide to stop using the plugin, you will need to replace all the affected users' password in dir_user table with a new password based on md5 hash.
|
...