Administrator's Guide - Kerio Software Archive

13.2 Creating a user accountStore password in high secure SHA format (recommended)By default, user passwords are encrypted by DES. The Store password in highly secureSHA format allows for a more secure encryption (SHA string). This option has one disadvantage— some methods of Kerio MailServer access authentication (APOP, CRAM-MD5and Digest-MD5) cannot be applied. The only methods available for this option are LOGINand PLAIN (it is highly recommended to use only SSL connection for authentication).If this option is enabled, it is necessary to change the user password. This can be doneeither by administrator or the user (e.g. by Kerio WebMail).Warning: Passwords saved in SHA are supported by Kerio MailServer 6.0.5 and later. Ifa configuration with SHA passwords is applied to an older version of Kerio MailServer,the authentication will not function.Account is disabledTemporary blocking of the account so that you do not have to remove it.Warning: This feature is not identical with account blocking set under Configuration →Advanced Options, on the Security Policy tab (see section 15.6). If the user enters aninvalid password too many times in row and the limit set on the Security Policy tab isreached, the account is blocked automatically. To unblock the accounts, use the Unlockall accounts now button on the Security Policy tab.Step 3 — Mail addressesIn this step, all required email addresses of the user can be defined. The other addresses arecalled aliases. The other addresses are called aliases. These can be defined either during theuser definition or in Domain Settings/Aliases. We recommend to use the first alternative — itis easier and the aliases are available through Active Directory.Note: If user accounts are maintained in Active Directory (see chapter 7.6), their aliases can bedefined in Active Directory Users and Computers. Global aliases (in Domain Settings → Aliases)cannot be defined this way.109