Merge pull request #110 from 8ear/master

Update Book to add password policy

administration/README.md

@@ -34,7 +34,7 @@ To add a new user, click on the Add User button in the administration menu to th
 
 *   **Email:** The user's e-mail address, this will be used as his/her login name and as an address to send all automated e-mails as well as e-mails sent by contacting the user as the reporter of an event.
 *   **Set password:** Tick the box if you want to define a temporary user-password for the user. If you don't, you should use the action button 'reset password' in the 'List Users' view to generate one and send it by email to the user.
-*   **Password:** *This textbox is displayed only when 'Set password' is ticked.* A Temporary password for the user that he/she should change after the first login. Ensure that the password is at least 6 characters long, includes a digit or a special character and contains at least one upper-case and at least one lower-case character.
+*   **Password:** *This textbox is displayed only when 'Set password' is ticked.* A Temporary password for the user that he/she should change after the first login. Ensure that password pass the [MISP password policy](https://misp.gitbooks.io/misp-book/content/quick-start/#password-policy).
 *   **Confirm Password:** *This textbox is displayed only when 'Set password' is ticked.* This should be an exact copy of the Password field.
 *   **Organisation:** A drop-down list enables you to choose an organisation for the user. To learn more about organisation, [click here](#organisation).
 *   **Roles:** A drop-down list allows you to select a role-group that the user should belong to. Roles define user privileges attributed to the user. To learn more about roles, [click here](#managing-the-roles).

quick-start/README.md

@@ -7,20 +7,39 @@ With the focus on automation and standards, MISP provides you with a powerful AP
 
 ## Login into MISP
 
-MISP credentials:
+MISP default credentials:
-
+<table>
-*   **GUI Admin:** admin@admin.test:admin  (it's the site admin account with full rights, feel free to create other users)
+<tr>
+  <td>Username:</td>
+  <td>admin@admin.test</td>
+</tr>
+<tr>
+  <td>Password:</td>
+  <td>admin</td>
+</tr>
+</table>
 
 ## Tasks to do after first Start
 
-- [] Change admin password 
+1. [Change admin password](https://misp.gitbooks.io/misp-book/content/quick-start/#password-policy)
-    - Ensure that the password is at least 6 characters long, 
+2. [Activate Feeds](https://www.circl.lu/doc/misp/managing-feeds/)
-    - includes a digit or a special character 
+3. [Setup your User](https://misp.gitbooks.io/misp-book/content/user-management/#first-run-of-the-system)
-    - and contains at least one upper-case 
+3. [Administrate MISP](https://www.circl.lu/doc/misp/administration/)
-    - and at least one lower-case character.
-- [] Activate Feeds: https://www.circl.lu/doc/misp/managing-feeds/
-- [] Administrate MISP: https://www.circl.lu/doc/misp/administration/
 
+## Password Policy 
+- [12]: Ensure that the password is at least 12 characters long
+- [A-Z]: contains at least one upper-case
+- [0-9| ]: includes a digit or a special character 
+- [a-z]: at least one lower-case character.
+
+**Last Updated: April, 2018**
+
+If you need a password generator use:
+- Ubuntu / Debian: [pwgen](https://linux.die.net/man/1/pwgen)
+- Website: [LastPass PW Generator](https://lastpass.com/generatepassword.php)
+- Built-in generator in Keepass* and other passwort manager
+
+**All Generator tools are only possibilities without any guarantee!**
 
 ## Create an Event
 

user-management/README.md

@@ -6,7 +6,7 @@
 When first logging into MISP with the username and password provided by your administrator, there are a number of things that need to be done, before you can start using the system.
 
 *   **Accepting the Terms of use:** The terms of use are shown immediately after logging in for the first time, make sure to read through this page before clicking "Accept Terms" at the bottom of the page.
-*   **Changing the password:** After accepting the ToU, you'll be prompted to change your password, but keep in mind that it has to be at least 6 characters long, it has to include at least one upper-case and one lower-case character in addition to a digit or a special character. Enter the same password into the confirm password field, before clicking submit to finalise the change.
+*   **Changing the password:** After accepting the ToU, you'll be prompted to change your password, but keep in mind that it has to be pass to the [MISP password policy](https://misp.gitbooks.io/misp-book/content/quick-start/#password-policy). Enter the same password into the confirm password field, before clicking submit to finalise the change.
 ![Changing the password](figures/password.png)
 *   **Setting up the GnuPG Key:** In order for the system to be able to encrypt the messages that you send through it, it needs to know your GnuPG key. Navigate to the Edit profile view (My Profile on the left -> Edit profile in the top right corner). Paste the key into the GnuPG Key field and click submit.
 *   **Subscribing to Auto-alerts:** Turning auto-alerts on will allow the system to send you e-mail notifications about any new public events entered into the system by other users and private events added by members of your organisation. To turn this on, navigate to the Edit profile view (My profile on the left navigation menu -> Edit profile in the top right corner). Tick the auto-alert checkbox and click submit to enable this feature.