Login and Password Rules Configuration

LOGIN AND PASSWORD RULES CONFIGURATION

ATiM System

In Core.php, change following variables to match your instituion policies.

Copy to Clipboard

// --------------------------------------------------------------------------------------------------------------------------------------------
 // LOGIN & PASSWORD
 // --------------------------------------------------------------------------------------------------------------------------------------------
 
 /**
  * Define the complexity of a password format:
  * - level 0: No constrain
  * - level 1: Minimal length of 8 characters + contains at least one lowercase letter
  * - level 2: level 1 + contains at least one number
  * - level 3: level 2 + contains at least one uppercase letter
  * - level 4: level 3 + special at least one character [!$-_.]
  */
 Configure::write('password_security_level', 2);
 
 /**
  * Maximum number of successive failed login attempts (max_login_attempts_from_IP)
  * before an IP address is temporary disabled what ever the username used.
  *
  * See 'time_mn_IP_disabled' core variable to set the time before an IP address is reactivated.
  * Set value to null if you don't want the system disables an IP address based on login attempts.
  */
 Configure::write('max_login_attempts_from_IP', 5);
 
 /**
  * Time in minute (time_mn_IP_disabled) before an IP address is reactivated.
  */
 Configure::write('time_mn_IP_disabled', 2);
 
 /**
  * Maximum number of login attempts with a same username (max_user_login_attempts) before a username is disabled.
  *
  * The status of a disabled username can only be changed by a user with administrator rights.
  * Set value to null if you don't want the system disables a username based on login attempts.
  */
 Configure::write('max_user_login_attempts', 5);
 
 /**
  * Period of password validity in month.
  * Keep empty if no control has to be done.
  * When password is invalid, a warning message will be displayed and the user will be redirect to the change password form.
  */
 Configure::write('password_validity_period_month', null);
 
 /**
  * Define if the feature of forgotten password reset by user is available on this installation or not
  * plus the complexity level of the process:
  * - level 0: Not supported
  * - level 1: Will require the exact answers to 3 user custom questions
  * - level 2: Will require the exact answers to 3 user custom questions plus the login and password of a second user
  */
 Configure::write('reset_forgotten_password_feature', 2);
 
 /**
  * Define the number of different passwords a user should use before to use an old one.
  * - level 0: Not supported (new password should be different than the previous one)
  * - level 1: New password must be different than the 2 old one passwords
  * - level 2: New password must be different than the 3 old one passwords
  */
 Configure::write('different_passwords_number_before_re_use', 2);

LADP

LDAP (Lightweight Directory Access Protocol) is a protocol that lets ATiM’s users to log in to ATiM by their system username and password.

Requirements

LDAP server
Install LDAP on web server

For Linux should use apt-get install php7.0-ldap (The PHP version is up to yours)

How use LDAP on ATiM

Create users by ab administrator account (usernames should be the same as login username into the system).
Change the core.php:
- if_use_ldap_authentication should be true
- ldap_server: name of the LDAP server
- ldap_domain: Domain of LDAP

Copy to Clipboard

Log out and then log in to ATiM and type your username and temporary password (ATiM will ask you to change the password and should type your real password).