Credentials - Password Length Limitations

Has anyone run into a password length limitation for credentials within Orion or products like SAM? We're being asked to lengthen our passwords for increased security. Having undertaken this as part of a project with another software product, the vendor assured us that as long as the OS supported the length we chose, we'd be fine. In reality, we ran into an issue with one component of their software and needed to work around the issue. Ultimately the issue was the way that specific component was written, and though the bulk of the product was OK, one component was not.

So, has anyone seen issue with credential length being a problem within the Orion suite of products? The password dialogs I've checked support the length we're going for, but that doesn't mean things will work once we've made the change. Thanks.

Find more posts tagged with

security policy

password policy

Accepted answers

All comments

mesverrum

I've never run into an issue, but none of my clients have every had all the unusually long of password strings, I think 15 characters is the max I've personally entered. Should be easy enough to create a couple test accounts in your environment just to confirm. The credentials for all the modules are stored in the same database table, so they should all have the same limitations in terms of size limitation but like you describe, you never know about oddball quirks until you do it.

rschroeder

I've successfully tested 20 character passwords. I'd expect password management to be done globally, higher up in Active Directory, than managing them individually in SolarWinds. If not done in AD, then auditors must be given access into SolarWinds administration to verify compliance--no one wants that if they can get around it using AD or another solution.