directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Enrique Rodriguez (JIRA)" <>
Subject [jira] Closed: (DIRCHANGEPW-2) Add basic password policy check
Date Fri, 30 Sep 2005 04:35:48 GMT
     [ ]
Enrique Rodriguez closed DIRCHANGEPW-2:

    Resolution: Fixed

Support for basic password policy checks has been added.

Committed to kerberos-common on revision 292621.
Committed to changepw tests on revision 292624.
Committed to changepw-protocol on revision 292627.

> Add basic password policy check
> -------------------------------
>          Key: DIRCHANGEPW-2
>          URL:
>      Project: Directory Change Password
>         Type: New Feature
>     Versions: 0.5.1
>     Reporter: Enrique Rodriguez
>     Assignee: Enrique Rodriguez
>     Priority: Minor
>      Fix For: 0.5.1

> The Change Password protocol does not currently apply any password policy checks.  Besides
being a desirable feature, this is also recommended by RFC 3244.
> Some implementation details:
> o  Violations of the password policy should result in the return of a KRB5_KPASSWD_SOFTERROR.
 This is not clear from the RFC, but is my best guess from the available error codes.
> o  The result string should contain feedback about the policy failure, encoded in UTF-8.
 Clients are supposed to display this string to the user.
> o  My first cut of this will support the well-established policy checks of length, character
mix, and username tokens.

This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
For more information on JIRA, see:

View raw message