Tuesday, March 28, 2006

We just want to be loved

Continuing on from a point in my previous post,
the security systems that change your passwords unbeknownced to you.

It's a well known insider fact that this is not the truth,
an average user, within my company anyway, will have to have a new password generated by an administrator for at least one of the systems that they use at least once a week.

However, other than when a password expires, as per audit requirements, how come these systems don't randomly 'forget' or 'change' my passwords?
And what's more, I have over 30 different combinations, one (or more) for each different system that I administer.

But still, users will always blame the authentication system.
"The computer has forgotten my password"
"It won't take my password"
"When I type it in, it won't recognise it"

OK, there is a potential for corruption. It can happen.
But on such a grand scale?

An example that I had the other week, one lady claimed that her username/password combinations for three seperate systems was miraculously not working on a daily basis and had to call us each and every day to have all three reset.
Bear in mind that these applications are completely redundant from one another, one was AS/400 based, one IBM Mainframe and the last was her Windows logon.
There is absolutely no possibilities whatsoever of corruption occuring for all three at exactly the same time, every 24 hours, I'm sure you will agree.

But still, to this day (even though the issue has amazingly cleared up) she maintains that she was keying in the correct passwords.

Which we know is a lie...