Security, Policies & Guidelines
Administrative Database Password Security Implementation Procedure
NMSU policy mandates that passwords for administrative database access be at least six characters in length and contain at least one number. Database System Administration has set all user accounts to automatically adhere to this policy at the database level. NMSU policy further states that these passwords are mandated to change every 120 days. To ensure this happens on schedule all database passwords are set to expire at that interval. Schema (product) passwords also exist on the database. These passwords are also being changed manually by the Database System Administrators to adhere to policy.
The Manager of Database System Administration will schedule on his calendar when new schema passwords are to be generated and changed. A Database System Administrator will then run the script that generates and changes the passwords.