ClearFoundation Tracker - ClearOS
View Issue Details
0015371ClearOSapp-users - User Managerpublic2017-06-19 07:162019-02-23 12:55
user2 
dloper 
normalminorhave not tried
closedsuspended 
7.3.1 
7.6.0 Updates 
0015371: Review password requirements
A number of characters are not allowed for passwords. This comes from the need to support the "lowest common denominator" across various systems, notably:

- CodeIgniter has a list of invalid characters, but we should just encode these.

- The maximum password length is set to 100. Windows 7 has a max of 127 characters.

Setting a maximum password length seems a bit odd in this day an age, but at the very least we should provide that reason to the end user. In other words, instead of showing:

   Error: password is too long

We should show:

   Error: to ensure Windows compatibility, passwords need to be less than X


In addition, passwords are checked using "cracklib" tools in order to prevent weak passwords. Can we get more useful feedback from that tool?
No tags attached.
Issue History
2017-06-19 07:17user2New Issue
2017-06-19 07:17user2Statusnew => confirmed
2017-08-18 10:02user2Target Version7.4.0 Beta 1 => 7.4.0 Updates
2018-02-12 10:18user2Target Version7.4.0 Updates => 7.5.0
2018-04-11 10:14user2Target Version7.5.0 => 7.6.0 Updates
2018-04-11 10:18user2Target Version7.6.0 Updates => 7.5.0 Updates
2018-04-11 10:43user2Target Version7.5.0 Updates => 7.5.0
2018-04-19 08:43user2Target Version7.5.0 => 7.5.0 Updates
2018-10-30 18:18user2Target Version7.5.0 Updates => 7.6.0
2018-11-10 10:38marclaporteNote Added: 0008601
2018-12-14 11:58dloperTarget Version7.6.0 => 7.6.0 Updates
2019-02-23 12:55dloperNote Added: 0009171
2019-02-23 12:55dloperStatusconfirmed => closed
2019-02-23 12:55dloperAssigned To => dloper
2019-02-23 12:55dloperResolutionopen => suspended

Notes
(0008601)
marclaporte   
2018-11-10 10:38   
FYI, Brendan added a password black list to Tiki:
https://sourceforge.net/p/tikiwiki/code/59973 [^]
https://doc.tiki.org/Password-Blacklists [^]
(0009171)
dloper   
2019-02-23 12:55   
Migrated from: https://gitlab.com/clearos/clearfoundation/app-users/issues/2 [^]