RE: [ActiveDir] Custom Password Filter DLL

Santhosh Sivarajan Mon, 06 Dec 2004 12:12:38 -0800

Thanks for the reply. Is it possible to lower the password complexity using custom password DLL? Following is our password requirement.

Total 6 characters long (through GPO

Minimum 4 characters

Minimum 2 numbers

The reason is, I cannot use either Capital letter or Special character at my

environment. If I enable default password complexity, I have to use either 1 Capital letter or 1 Special character. If I disable default password complexity, the custom DLL is not going to work. Is it possible to lower the password complexity using a �password complexity� DLL?

Thanks in advance!

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn Corbett
Sent: Sunday, December 05, 2004 1:59 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Custom Password Filter DLL

Eric,

This was more in reference to the resource hacker link that was posted. I

was presuming that rather than create a custom gina, people would simply

hack the resources on the standard one, in which case my points were valid.

You are correct of course, if the standard gina is replaced with a new one

(and the associated reg changes) then you should be ok (not withstanding

having a rollback plan).

Password filter dll's are a different kettle of fish, I've implemented them

on a number of occasions without strife.

Glenn

-----Original Message-----

From: [EMAIL PROTECTED]

[mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman

Sent: Sunday, 5 December 2004 1:02 PM

To: [EMAIL PROTECTED]; [EMAIL PROTECTED]

Subject: RE: [ActiveDir] Custom Password Filter DLL

I can't speak for the entire company, but I have debugged many custom

passfilt and gina issues before. Have you had problems? If so please let m

eknow, I'd be curious to hear what they were. You can ping me offline on

that if you would like.

I would point out that despite the fact that msgina.dll is upgraded during

hotfix/sp install at times, your ginadll reg value probably would not.

Therefore our upgrade of the gina would not be of great concern to you so

long as you don't depend upon something that changes in the internals of our

gina.

I can't recall seeing a hotfix or sp that overwrites the reg value if you

specify a custom gina, but if there was a time on that I'm sure someone will

step in and point it out. I just don't recall seeing it. :)

~Eric

________________________________

From: [EMAIL PROTECTED] on behalf of Glenn Corbett

Sent: Sat 12/4/2004 5:31 PM

To: [EMAIL PROTECTED]

Subject: RE: [ActiveDir] Custom Password Filter DLL

*shudder*

Don't forget however that if you go down this path, make sure you

A) Don't call Microsoft - they will laugh at you, charge your credit card,

then hang up

B) have a rollback plan to the standard GINA

C) remember that the gina will most likely be replaced during a service pack

(and sometimes) during hotfixes, so you may have to rehack and re-roll your

changes again

D) other vendors may replace / extend the gina (like smartcard / biometric

addons) which may not like you hacking the GINA (or put their own one in

which may negate your changes)

Apart from that, have fun

G.

________________________________

From: [EMAIL PROTECTED]

[mailto:[EMAIL PROTECTED] On Behalf Of Blair, James

Sent: Friday, 3 December 2004 12:29 PM

To: [EMAIL PROTECTED]

Subject: RE: [ActiveDir] Custom Password Filter DLL

http://www.users.on.net/johnson/resourcehacker/

________________________________

From: [EMAIL PROTECTED] on behalf of Santhosh Sivarajan

Sent: Fri 3/12/2004 11:13 AM

To: [EMAIL PROTECTED]

Subject: RE: [ActiveDir] Custom Password Filter DLL

Rhacker?? Where do I find that tool?

Matt Brown <[EMAIL PROTECTED]> wrote:

        You can use a program called Rhacker to modify the Gina, then rename

it, change the reg key and reboot. All there is too it.



        We use it for our computer labs on campus to replace the Microsoft

logos with our own and to add an appropriate use alert.



        Thanks,

        --

        Matt Brown [EMAIL PROTECTED]

        Consultant for Student Technology Fee

        website: http://techfee.ewu.edu/

        +--------------------------------------+

        | 509.359.6972 ph. - 509.359.7087 fx

        | 307 MONROE HALL | Cheney, WA 99004

        +--------------------------------------+

        -----Original Message-----

        From: [EMAIL PROTECTED]

[mailto:[EMAIL PROTECTED] On Behalf Of Santhosh Sivarajan

        Sent: Thursday, December 02, 2004 3:01 PM

        To: [EMAIL PROTECTED]

        Subject: [ActiveDir] Custom Password Filter DLL



        Hi all,



        I am in a process of writing a custom password filter DLL. I

modified

        the DLL and implemented it. Password filter is working according

our

        requirements but my problem is, it is still displaying the default

        password complexity message (7 char, 24 history..etc etc). Is there

anyway

        I can modify the display message without modifying the GINA?   I

found

        GINA source code on MSDN but it looks so complicated to me. Any

        suggestions or recommendations?



        Thanks in advance!

        Sen

List info   : http://www.activedir.org/mail_list.htm

List FAQ    : http://www.activedir.org/list_faq.htm

List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm

List FAQ    : http://www.activedir.org/list_faq.htm

List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm

List FAQ    : http://www.activedir.org/list_faq.htm

List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

RE: [ActiveDir] Custom Password Filter DLL

Reply via email to