|
发表于 2014-3-18 09:53:31
|
显示全部楼层
My advice would always be to set up windows single sign on (i.e. integrated login) or LDAP binding (either natively in TM1 or via CAM) and don't worry about passwords in TM1 at all. Although you can set up minimum password length and password expiry days in TM1 there is no capability for setting any parameters for password strength, don't re-use last n passwords, password expiry notification etc, etc. That is if compliance is important for your application then TM1 password security is likely to be woefully inadequate.
If you insist on sticking with maintaining passwords in TM1 then you can roll your own notification as long as you have access to a SMTP server and email utility (search here on this forum and you should find plenty of examples of sending email with TI ExecuteCommand plus 3rd party email utility). Then it is just a matter of having an email address attribute per client and a nightly scheduled chore of the Client Properties cube to compare password last time updated with the current date and if under a "warning threshold" of days to password expiry then send an email to the user. Its all perfectly doable, but for the same amount of implementation effort I would rather set up LDAP integration (or for a small fraction of the effort set up integrated login.)
PS this should probably posted in the "TM1" forum as this is a TM1 question not a General question. |
|