[
https://issues.apache.org/jira/browse/SOLR-16022?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Weaver updated SOLR-16022:
--------------------------
Description: When changing user passwords through the Security UI, the
password is required to follow a complexity pattern. It would be nice if this
option were configurable as password length provides more entropy than the
required password complexity. Either an enable/disable option or configurable
settings would be nice. (was: After upgrading from Solr 7.7 to Solr 8.11,
users can no longer login to the admin UI. This seems to be caused by the
requirement for strong passwords. My users were previously using weak passwords
(this is isolated environment so not a big deal) in 7.7 and could use the UI.
After upgrading to 8.11, they are unable to login unless I change the password
to the required complexity. I did not see this change anywhere in the
documentation. At the very least this should be documented in the upgrade docs
and the reference docs. Ideally it should be a configurable setting as longer
passwords provide more entropy than complex ones.)
Issue Type: Wish (was: Bug)
Priority: Minor (was: Major)
Summary: Improve security ui (was: Users unable to login after upgrade)
> Improve security ui
> -------------------
>
> Key: SOLR-16022
> URL: https://issues.apache.org/jira/browse/SOLR-16022
> Project: Solr
> Issue Type: Wish
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Admin UI, security
> Affects Versions: 8.11.1
> Environment: Solr version: 8.11.1
> OS: CentOS Linux 7
> Reporter: Weaver
> Priority: Minor
>
> When changing user passwords through the Security UI, the password is
> required to follow a complexity pattern. It would be nice if this option were
> configurable as password length provides more entropy than the required
> password complexity. Either an enable/disable option or configurable settings
> would be nice.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
