Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: basmistry on September 21, 2007, 01:48:43 PM

Title: simple passwords
Post by: basmistry on September 21, 2007, 01:48:43 PM
Is there any way to change the password policy.

We only have simple people here - I'm using SME Server for 4 people
This is a Server only role
ALL of the 4 people have are partners and have no need to complex
individual passwords  :?
Title: Re: simple passwords
Post by: mmccarn on September 21, 2007, 03:15:34 PM
If you set passwordstrength to none as shown here:  http://wiki.contribs.org/SME_Server:Documentation:FAQ#Password_Strength_Checking you will be able to use any password you want with a minimum length of either 6 or 7 characters (docs say 7, but I think it's 6). 

This is the simplest / least secure password option available in SME.

It is possible to forcefully set simpler passwords, but as these may cause problems at a later time (e.g. no login after upgrade to version x...) this is strongly discouraged.

[edit] Password_Strength_Checking updated after reading byte's post (below) [/edit]
Title: Re: simple passwords
Post by: byte on September 21, 2007, 07:06:22 PM
(docs say 7, but I think it's 6).

Yep Mike is correct it is 6> even if you set it password strength as none for example using "aaaaaa" will work using "a" will not work.

See bug http://bugs.contribs.org/show_bug.cgi?id=2686 for complete details.
Title: Re: simple passwords
Post by: slords on September 21, 2007, 07:25:25 PM
The pam module has a requirement to have at least a 6 character password.  SME enforces at least a 7 character password.
Title: Re: simple passwords
Post by: SoftDux on January 20, 2008, 04:41:36 PM
A workable fix can be found here: http://forums.contribs.org/index.php?topic=38078.0
Title: Re: simple passwords
Post by: byte on January 20, 2008, 05:09:02 PM
A workable fix can be found here: http://forums.contribs.org/index.php?topic=38078.0

Again not recommended as per:

http://forums.contribs.org/index.php?topic=38190.0
Title: Re: simple passwords
Post by: raem on January 21, 2008, 12:28:52 AM
SoftDux

It's not a good idea to promote non standard (and not recommended) workarounds, as these usually cause people problems later.
People then require assistance to resolve their self inflicted problems, and also get annoyed with sme server OS.