Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Received-SPF: pass (athena.apache.org: domain of
 Demetrius.Tsitrelis@citrix.com designates 66.165.176.89 as permitted sender)
From: Demetrius Tsitrelis <Demetrius.Tsitrelis@citrix.com>
To: "dev@cloudstack.apache.org" <dev@cloudstack.apache.org>
Subject: RE: [PROPOSAL] Adding a plugin to check the password strength of
 all users
Thread-Topic: [PROPOSAL] Adding a plugin to check the password strength of
 all users
Thread-Index: AQHPok3i/6bYHzKtmk+yUhHy693rJZul0fDK//+ptwCAAJFREA==
Date: Fri, 18 Jul 2014 16:58:40 +0000
Message-ID: 
 <43A11A1933FEF445A080F7D88687264616382AC3@SJCPEX01CL01.citrite.net>
References: <1FCB29E4-339A-4B9B-9039-19872C75BEB7@citrix.com>
 <43A11A1933FEF445A080F7D886872646163827E7@SJCPEX01CL01.citrite.net>
 <95F76D2C-1372-48DB-B352-7B8A321CF74D@citrix.com>
In-Reply-To: <95F76D2C-1372-48DB-B352-7B8A321CF74D@citrix.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

So the plugin will show the strength AND it will enforce the strength when =
a user is created or updates his password.  Will it be possible for an admi=
nistrator to disable either of these?

For both of those capabilities is the plugin's behavior configurable for di=
fferent authentication encoders?  That is, could I have one set of rules fo=
r the SHA256 authenticator and a different set of rules for the MD5 authent=
icator?

-----Original Message-----
From: Damoder Reddy [mailto:Damoder.Reddy@citrix.com]=20
Sent: Friday, July 18, 2014 9:13 AM
To: dev@cloudstack.apache.org
Subject: Re: [PROPOSAL] Adding a plugin to check the password strength of a=
ll users

Will show the strength of the password as well.


On 18-Jul-2014, at 6:53 pm, Demetrius Tsitrelis <Demetrius.Tsitrelis@citrix=
.com> wrote:

> Will the plugin merely show the strength of the password or will the plug=
in prevent the use of weak passwords?
>=20
> ________________________________________
> From: Damoder Reddy [Damoder.Reddy@citrix.com]
> Sent: Thursday, July 17, 2014 11:02 PM
> To: dev@cloudstack.apache.org
> Subject: [PROPOSAL] Adding a plugin to check the password strength of=20
> all users
>=20
> Hi all,
>=20
> I am thinking to add a plugin which enables to check the password strengt=
h of a user while setting/resetting the password for that user.
> why as a plugin because different companies may have a different rule set=
s to check the password strength.
>=20
> The default implementation will have the password strength calculation=20
> based on the following parameters 1. Length of the password 2. Number=20
> of Character Sets involved in the password defined. For ex, Upper Case Le=
tter, Lower Case letter, Digits and special character set.
>=20
> Ay suggestions/Comments?
>=20
> Thanks
> Damoder