SAP Basis

Unit 11: Basics of User Administration ADM100
Figure 137: System Parameters for User Logons 1/2
You can set the minimum length for passwords with the parameter
login/min_password_lng. You specify the minimum number of digits,
letters, orspecial characters that must be included in passwords using
the parameters login/min_password_digits, login/min_password_letters, and
login/min_password_specials. Thevaluerangeis0to8.
The parameter login/password_expiration_time specifies the number of days
after which a user must set a new password. If the parameter is set to 0,
the user does not need to change his or her password.
There are general rules for passwords that cannot be deactivated. A
password
• Mustbedifferentfromthelastfivepasswords
• Mustbeatleastthreecharacterslong
• Must not begin with “?”, “!”, or “ ”
• Must not be “pass”
• Must not begin with three identical characters
You can define additional password restrictions in table USR40.
The parameters login/password_max_new_valid and login/password_max_reset_valid
specify the length of time for which an initial password or a
password reset by an administrator is valid.
432 © 2003 SAP AG. All rights reserved. 2003/Q3