Password security

[Lawrence V. Cipriani]

One enhacement to security I have seen on mainframes running UNIX(tm) is
to have a "External Security Password" that is settable by the system
administrator.  The admin will change it monthly.  Typically it is
"pronouncable but hard".  To login successfully, you have to give your
login, your password, and the ESP.  Then, if any of these is bad, you're
repompted.  This helps security by ensuring that there is at least one
hard password.  The bad part is that you have to distribute the new
password to all the users.  I like this system pretty well.

-- 
Larry Cipriani, AT&T Network Systems, Columbus OH,
Path: att!cbnews!lvc    Domain: lvc at cbnews.ATT.COM