Fedora directory users - Jan 2006 - enforce strong passwords

Hello,

I was wondering if anyone was looking into enforcement of strong passwords.
I''m not a hardcore C programmer but I''m willing to help. But
first I''ll have
to try in getting the current version compiled.
I''m certainly willing to do some testing.

Greetings,
Jo

Jo De Troy wrote:
> Hello,
>
> I was wondering if anyone was looking into enforcement of strong 
> passwords.
> I''m not a hardcore C programmer but I''m willing to help.
But first
> I''ll have to try in getting the current version compiled.
> I''m certainly willing to do some testing.
Funny you should mention that.  We''re looking at that issue right now.
What sort of things would you want to check for?
min number of lower case
min number of upper case
min number of digits
min number of alphanumerics
min number of special chars
no user data in password
dictionary checking?  If so, how?  /usr/share/dict/words?
>
> Greetings,
> Jo
>
>------------------------------------------------------------------------
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>

Jo,

I''m expecting to check in code for this in the next few days, so
don''t
worry about it.  Thanks for offering to help with it though!

Are there any specific password complexity requirements that you could 
share with us?  I''d like to make sure I''m writing something
useful to as
many different deployments as possible.

-NGK

Jo De Troy wrote:
> Hello,
>
> I was wondering if anyone was looking into enforcement of strong 
> passwords.
> I''m not a hardcore C programmer but I''m willing to help.
But first
> I''ll have to try in getting the current version compiled.
> I''m certainly willing to do some testing.
>
> Greetings,
> Jo
>
>------------------------------------------------------------------------
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>

Richard Megginson wrote:
> Jo De Troy wrote:
> 
>> Hello,
>>
>> I was wondering if anyone was looking into enforcement of strong 
>> passwords.
>> I''m not a hardcore C programmer but I''m willing to
help. But first
>> I''ll have to try in getting the current version compiled.
>> I''m certainly willing to do some testing.
> 
> Funny you should mention that.  We''re looking at that issue right
now.
> What sort of things would you want to check for?
It''s a pity I haven''t read this thread earlier, currently
I''m lagging a
bit behind...
For me it would be nice to allow/disallow certain characters in 
passwords. For example, we had a release of horde/imp which failed to 
cope with the "/"-character in passwords, so we disallowd that 
character, otherwise support was to busy answering questions like "why 
can I use every application but webmail?".

-- 
CU,
    Patrick.