Hi Carey, I'm going to have to find some quiet time to disect what you have provided. I appreciate the input. This should provide just enough security for what it is required for. I'll probably come back with some questions.
Thanks for the help, Susan On Nov 12, 2007 10:45 PM, Carey Matthew Black <[EMAIL PROTECTED]> wrote: > Susan, > > You peaked my interest... this has go to be a common topic for others ... > so... > > After about 2 minutes on Google.. In found some java code to generate > SIMPLE passwords. > ( > http://www.java2s.com/Code/Java/Security/Cheaplightweightlowsecuritypasswordgenerator.htm > ) Ok it looks really simple... but you should get the idea... > > Now to convert it to a Java Scripting chunk of code. :) > > " > import com.remedy.arsys.api.Value; > import java.lang.Integer; > > // first input is number of passwords requested > // second input is set of characters to use to build the passwords > // third input is the length of passwords to build > > > protected static java.util.Random r = new java.util.Random(); > > /* > * Set of characters that is valid. Must be printable, memorable, and > "won't > * break HTML" (i.e., not ' <', '>', '&', '=', ...). or break shell > commands > * (i.e., not ' <', '>', '$', '!', ...). I, L and O are good to leave out, > * as are numeric zero and one. > */ > char[] goodChar = { 'a', 'b', 'c', 'd', 'e', 'f', 'g', > 'h', 'j', 'k', 'm', 'n', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', > 'x', 'y', 'z', 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'J', 'K', > 'M', 'N', 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', 'Y', 'Z', > '2', '3', '4', '5', '6', '7', '8', '9', '+', '-', '@', }; > > StringBuffer sb = new StringBuffer(); > for (int i = 0; i < 10; i++) { > sb.append(goodChar[r.nextInt(goodChar.length)]); > } > > // make sure we at least make one password > int num_pass = 1; > if (values[0] != null){ > num_pass = Integer.parseInt(values[0].toString()); > } > // make sure we have a default set of chars to build passwords from > String possible_chars = > "abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ23456789+-@"; > if (values[1] != null){ > possible_chars = values[1].toString(); > goodChar = possible_chars.toCharArray(); // convert to charArray for > function to work > } > // default to passwords of length 10 if no other lenght is supplied > int pwd_len = 10; > if (values[2] != null){ > pwd_len = Integer.parseInt(values[2].toString()); > } > Value[] result = new Value[num_pass]; > > for (int i = 0; i < num_pass; i++){ > StringBuffer sb = new StringBuffer(); > for (int ii = 0; ii < pwd_len; ii++) { > sb.append(goodChar[r.nextInt(goodChar.length)]); > } > result[i] = new Value(sb.toString()); > } > " > > > If you load up (or are already using) the Java Script Plugin > (ARSYS.ARF.JAVA) then you can pass this chunk of code to it with three > inputs: > > // first input is number of passwords requested > // second input is set of characters to use to build the passwords > // third input is the length of passwords to build > > > > I think that should be simple enough to get the job done for most. > However anyone with any serious "Security" concerns would likely want > to do things a bit differently. ( Then again.. any one with any real > SECURITY concerns are likely not using _just_ passwords anymore. Much > less generated passwords. ) > > HTH. > > I know that the 7.0.1 server would still require filters to be > triggered to get at this function. So you could attach it to a regular > form that lets people submit(Push action) records to it. The value(s) > could be retrieved from the from then from a Set Field action. As long > as the form is strictly row level accessed to the $USER$ who created > the row you should be fine. You can even delete the record with a > second Push action if you wanted to as well. ( You just need a few > more filters. :) ... So it can be done "from an Active Link", but in > v7.1 a "Service" Action would be the way to go. Much cleaner but you > get the same basic result. > > -- > Carey Matthew Black > Remedy Skilled Professional (RSP) > ARS = Action Request System(Remedy) > > Love, then teach > Solution = People + Process + Tools > Fast, Accurate, Cheap.... Pick two. > > > On Nov 12, 2007 6:28 PM, Susan Palmer <[EMAIL PROTECTED]> wrote: > > ** > > Hi Everyone, > > > > I'm looking for a password generator. I need to create password values > to > > set into two fields via an active link button. These are not used for > > Remedy logins. I downloaded the password generator on Gidd's site but > it > > only does alpha/numeric with no special characters. It has to be > something > > I can use with the User Tool, not the web tool. I'd really like to > automate > > it. Click the button and the field has the password ... whaalaa. > > > > Any suggestions would be welcome! Thanks for your help ... > > > > Susan Palmer > > ShopperTrak > > ARS v7.0.1P3 > > Oracle 10g > > Windows2003 > > > _______________________________________________________________________________ > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org > Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
