Difference between revisions of "Security"

From ICA-AtoM
Jump to navigation Jump to search
(Add settings)
 
(→‎Settings: fix link to TLS)
Line 3: Line 3:
 
In [[Release 1.3]] three new security settings are added to AtoM:
 
In [[Release 1.3]] three new security settings are added to AtoM:
  
* '''require_ssl_admin''': see [[TLS]] wiki page for more details
+
* '''require_ssl_admin''': see [[Qubit:TLS|TLS]] for more details
  
 
* '''require_strong_passwords''': enhance login validation to force use of strong passwords. At least 8 characters long, contains characters from 3 of the following classes:
 
* '''require_strong_passwords''': enhance login validation to force use of strong passwords. At least 8 characters long, contains characters from 3 of the following classes:

Revision as of 11:49, 1 August 2012

Please note that ICA-AtoM is no longer actively supported by Artefactual Systems.
Visit https://www.accesstomemory.org for information about AtoM, the currently supported version.

Settings

In Release 1.3 three new security settings are added to AtoM:

  • require_ssl_admin: see TLS for more details
  • require_strong_passwords: enhance login validation to force use of strong passwords. At least 8 characters long, contains characters from 3 of the following classes:
    1. Upper case letters
    2. Lower case letters
    3. Numbers
    4. Special characters
  • limit_admin_ip: limit incoming requests for all administrator functionality to an IP address IP range. Two examples:
    1. 192.168.0.1
    2. 192.168.0.1-192.168.0.255

These options are changeable under the settings page. You must be an administrator.

Options 'require_ssl_admin' and 'limit_admin_ip' can be bypassed using the Debug mode.