Topic: Strong Passwords

[chris snow]

Has anyone done any work on checking password strength when someone changes their password?

For example: password quality script aka --with-cracklib replacement
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&selm=b2cinj%249ik%241%40FreeBSD.csie.NCTU.edu.tw

Thanks,

Chris

[Gordon Rowell]

> Has anyone done any work on checking password strength when
> someone changes their password?
>
> For example: password quality script aka --with-cracklib replacement
> [...]

Yes - we apply cracklib to the admin password, but not currently
to user passwords (by default).

Have a look at the configdb entry for passwordstrength and
esmith::FormMagick::validate_password.

Gordon