Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: samsoe16 on February 27, 2008, 04:15:43 PM

Title: Password strength
Post by: samsoe16 on February 27, 2008, 04:15:43 PM

dear all,
i new on using sme server, a just want ask about how to change password strenght for user and i just want use 4 character for the password. i have read the manual book and try this command "config setprop passwordstrength Users none" but nothing happen. i still cannot change passwords strenght, i use sme server 7.2.
thanks for the answer.

Title: Re: Password strength
Post by: cactus on February 27, 2008, 05:37:07 PM

Quote from: samsoe16 on February 27, 2008, 04:15:43 PM

dear all,
i new on using sme server, a just want ask about how to change password strenght for user and i just want use 4 character for the password. i have read the manual book and try this command "config setprop passwordstrength Users none" but nothing happen. i still cannot change passwords strenght, i use sme server 7.2.
thanks for the answer.

The minimal password length is 7 charachters, the paswordstregth only determines the crypotgraphic strength and variation in used characters.

Title: Re: Password strength
Post by: Teviot on February 29, 2008, 02:19:30 AM

Is there a command that administrators can change for the default lenght of password?


Thanks
Teviot

Title: Re: Password strength
Post by: raem on February 29, 2008, 03:35:00 AM

teviot

Quote

Is there a command that administrators can change for the default lenght of password?

No.

A workaround was published in the forums but it requires code changes that will be overwritten with the next update, apart from other potential issues with the pam module and at upgrade time when running a non standard server. There may also be problems with future (new) functionality if you use a less than 7 character password.
See
http://forums.contribs.org/index.php?topic=40035.0
it is applicable to sme7.x

Title: Re: Password strength
Post by: Teviot on February 29, 2008, 03:42:47 AM

Thanks Ray

While I don't understand what or how PAM works. BUT my understanding of security and the possible function that PAM has.

Teviot

Title: Re: Password strength
Post by: raem on February 29, 2008, 03:48:12 AM

teviot

http://aplawrence.com/Basics/understandingpam.html

Title: Re: Password strength
Post by: Teviot on February 29, 2008, 03:52:18 AM

Ray

Thank you

All clear now

Teviot