RESETTING FORGOTTEN KERBEROS PASSWORDS
DESCRIPTION
BENEFITS
IT Express
Users visit IT Express (182 Shields
Library) and present proof of
identification.
- Relatively secure
- Serves students, faculty, and
staff
Departmental
proxies
Approx. 50 proxies are registered and
authorized to reset passwords for faculty
and staff in campus departments (see
http://email/email/proxies.html).
- Client doesn’t have to go to IT
Express; does not necessarily
have to show proof of identity.
CURRENT
SERVICE
Note: For individuals who are not local
or do not have access to a proxy, the
Postmaster has set up a separate, faxbased procedure.
POSSIBLE
OPTIONS
Departmental
proxies
Improve and streamline current
procedures: allow proxies to bypass
photo identification for known users; use
digital signatures or email encryption
instead of fax; develop a PIN Web
services client.
- Faster, more streamlined
- Client doesn’t necessarily
have to show proof of
identity.
Self-service
solution
Users reset forgotten passwords through
a self-service Web interface.
- Provides fast, convenient,
24x7 service to users
- Client doesn’t have to show
proof of identity by personal
appearance.
Process: Users are asked to identify
themselves by entering full name, social
security number, and birthdate. Help
Desk staff follow up by calling the
following working day to verify password
change.
Information and Educational Technology
DISADVANTAGES/RISKS
- Available only during business hours
- Not useful to those who may have
forgotten their passwords after hours or
on weekends
- Not convenient to those located off
campus or away from core campus
- Available only during business hours
- Requires photo ID and a form signed by
the user.
- Proxy must contact the Accounts
Manager and fax a form to IT Express so
a 5-digit token can be generated for the
user. The user then changes his/her
password (change effective overnight).
- Token expires 24 hours after it is
generated.
- Some departments do not have proxies.
- Proxies are not expected to serve
students.
- Low security barrier.
Administrative Computing Coordinating Council – Dec. 3, 2001