Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update HANA and Netweaver/S4HANA password regex/docs #873

Merged
merged 1 commit into from
Jul 12, 2022

Conversation

melzer-b1
Copy link
Contributor

@melzer-b1 melzer-b1 commented Jul 5, 2022

update HANA and Netweaver/S4HANA password regex/docs for the following rules:

HANA:

Netweaver / S4HANA:

  • https://help.sap.com/docs/SAP_NETWEAVER_750/c6e6d078ab99452db94ed7b3b7bbcccf/4ac3f18f8c352470e10000000a42189c.html?locale=en-US
  • login/min_password_lng = 6
  • max length = 40
  • special characters are possible but not needed
  • The password can only consist of digits, letters, and the following (ASCII) special characters: !"@ $%&/()=?'*+~#-_.,;:{[]}<>, and space and the grave accent.
  • The password can consist of any characters including national special characters (such as ä, ç, ß from ISO Latin-1, 8859-1). However, all characters that aren’t contained in the set above are mapped to the same special character, and the system therefore doesn’t differentiate between them.
  • no other restrictions

This PR will close #819

@melzer-b1 melzer-b1 changed the base branch from main to develop July 5, 2022 22:02
@melzer-b1 melzer-b1 force-pushed the melzer/regex branch 8 times, most recently from 85d942f to 43d2a6c Compare July 8, 2022 06:56
Copy link
Collaborator

@yeoldegrove yeoldegrove left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See comments.

aws/terraform.tfvars.example Outdated Show resolved Hide resolved
aws/terraform.tfvars.example Outdated Show resolved Hide resolved
doc/sap_passwords.md Outdated Show resolved Hide resolved
doc/sap_passwords.md Outdated Show resolved Hide resolved
gcp/terraform.tfvars.example Outdated Show resolved Hide resolved
libvirt/terraform.tfvars.example Outdated Show resolved Hide resolved
libvirt/terraform.tfvars.example Outdated Show resolved Hide resolved
openstack/terraform.tfvars.example Outdated Show resolved Hide resolved
openstack/terraform.tfvars.example Outdated Show resolved Hide resolved
@melzer-b1 melzer-b1 force-pushed the melzer/regex branch 3 times, most recently from 0df1c50 to 33b2a5e Compare July 8, 2022 07:50
@pirat013
Copy link
Contributor

pirat013 commented Jul 8, 2022

Hi,
the NetWeaver documentation says officially at least 3 characters as min.
https://help.sap.com/docs/SAP_NETWEAVER_750/c6e6d078ab99452db94ed7b3b7bbcccf/4ac3efb58c352470e10000000a42189c.html

But in general, your suggestion looks good to me. We may have to double-check if a long password with 20 digits or even longer would work with the SWPM. I still remember that it was not possible to use passwords longer than 16 digits.

@yeoldegrove
Copy link
Collaborator

the NetWeaver documentation says officially at least 3 characters as min.
https://help.sap.com/docs/SAP_NETWEAVER_750/c6e6d078ab99452db94ed7b3b7bbcccf/4ac3efb58c352470e10000000a42189c.html

The doc we linked in the issues tells us 3-40 chars are possible but 6 chars are the default value.
https://help.sap.com/docs/SAP_NETWEAVER_750/c6e6d078ab99452db94ed7b3b7bbcccf/4ac3f18f8c352470e10000000a42189c.html?locale=en-US
So I guess we're fine here.

@yeoldegrove
Copy link
Collaborator

We may have to double-check if a long password with 20 digits or even longer would work with the SWPM. I still remember that it was not possible to use passwords longer than 16 digits.

That is definitively a check we should do before merging this.

@yeoldegrove yeoldegrove self-requested a review July 8, 2022 11:41
Copy link
Collaborator

@yeoldegrove yeoldegrove left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM now

@yeoldegrove yeoldegrove changed the title Melzer/regex update HANA and Netweaver/S4HANA password regex/docs Jul 8, 2022
@melzer-b1 melzer-b1 merged commit 98126f1 into SUSE:develop Jul 12, 2022
@s4g4rkr
Copy link

s4g4rkr commented Jul 18, 2022

Hi, the NetWeaver documentation says officially at least 3 characters as min. https://help.sap.com/docs/SAP_NETWEAVER_750/c6e6d078ab99452db94ed7b3b7bbcccf/4ac3efb58c352470e10000000a42189c.html

But in general, your suggestion looks good to me. We may have to double-check if a long password with 20 digits or even longer would work with the SWPM. I still remember that it was not possible to use passwords longer than 16 digits.

AFAIK - For NetWeaver/ASCS/PAS the allowed master passwd length is 10-14 by SWPM and for HANA with higher number is allowed. Choosing "Custom" over "Typical" Parameter settings while running SWPM allows setting passwd for individual user (like TSMADM, WEBADM, SecureStorage, DB-Schema etc)

Master Password Basic Password policy: https://help.sap.com/docs/SLTOOLSET/39c32e9783f6439e871410848f61544c/fe3f4554f82b1d5de10000000a44538d.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

check/fix discrepancies between regex/docs for passwords
4 participants