Jo De Troy wrote:

Hi Nathan, Richard,

I was thinking along the lines of pam_passwdqc, well part of it.
The password should contain at least 3 different character categories.
The categories being: lowercase, uppercase, special characters and numbers
Not specifically a minumum number of uppercase/lowercase/...
Off course there should be no user data in the password, it should not even contain the username as a substring. But I think that code is already in CVS. It's checking for cn, givenname, surname, ... attributes
A dictionarry check would be nice but I would maybe make this  optional.
I guess that if we make the rules too stringent the enduser may complain

The goal would be to set up reasonable default values if the user decides to enforce strong passwords, then give them the knobs to turn up or down the strength.


Greetings,
Jo

------------------------------------------------------------------------

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Reply via email to