Neoview ODBC Drivers Manual (R2.5)

• Password handling changes
• A new DLL in the installation package, to support password encryption
Password encryption features are available on these platforms:
• Windows 32-bit
• Windows 64-bit
This section discusses:
• “Password Length” (page 19)
• “Password Expiration” (page 19)
• “Password Encryption” (page 19)
• “Secure Login and Multiple-Role Support for Neoview ODBC Drivers” (page 21)
• “Server Certificates” (page 21)
Password Handling Changes for Release 2.5
As of release 2.5, you can change your password only from NCI and HPDM or, in the case of
database (LDAP) users, on the external directory server platform. The ODBC driver no longer
supports password changes at login time or from applications other than NCI and HPDM.
However, if password expiration warnings are configured as described in the Neoview User
Management and Security Administration Guide, a message is displayed at login if the password
will soon expire (on a date specified in the warning) or if the password has expired but the
database user has not yet exhausted a grace count configured on the LDAP server.
Password Length
The maximum password length allowed to connect to the Neoview database is 128 characters.
Password Expiration
NDCS is configured to allow the driver to display password expiration warnings. If you receive
a warning, you can continue your session, but you should change your password with NCI as
soon as possible.
If you are using HPDM or NCI to connect and you get a password expiration warning, you are
prompted to change your password and then log on to the session.
Password Encryption
Neoview clients require the user to present a password in order to log on. These passwords are
encrypted by the Neoview ODBC and JDBC drivers, using industry standard asymmetric key
cryptography. For detailed information about user management, passwords, password encryption,
certificates, and other security issues, see the Neoview User Management and Security Administration
Guide.
Passwords for Platform-level Users
Passwords for the predefined “platform-level” users are set during system installation.
To log on to any Neoview client, a platform-level user must provide both the password of his
or her platform username and the password of the underlying user ID, as in:
mypassword/acctpassword
where mypassword is the password associated with the platform username, and acctpassword
is the password associated with the underlying user ID. For example, if you have a personal
account as ROLE.SECMGR, not as a database user but as a platform user (who has access to the
platform even when the LDAP server is unavailable), you must enter your own password, a
forward slash, and then the password associated with ROLE.SECMGR.
Passwords and Server Certificates 19