Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: stodge on December 28, 2008, 01:23:51 AM

Title: Lower security restrictions on passwords?
Post by: stodge on December 28, 2008, 01:23:51 AM: I just installed 7.4 at home; I used an earlier version for what must be close to 10 years with zero problems. :)

The server is behind a firewall/router so security isn't a primary concern. I'm more bothered with letting my wife and I use simple password we can remember. But the restrictions are quite tight; it enforces passwords with lower/upper case, numbers and other characters. Is there anything I can configure to let us enter simple passwords?

Strangely I was able to set a simple root password.

Thanks
Title: Re: Lower security restrictions on passwords?
Post by: stodge on December 28, 2008, 01:50:24 AM: Or I could assign some random, highly secure password through the web gui and then drop to the command line to override it with a low security password... Hmmm
Title: Re: Lower security restrictions on passwords?
Post by: David Harper on December 28, 2008, 01:56:29 AM: Please read this FAQ entry (http://wiki.contribs.org/SME_Server:Documentation:FAQ#Password_Strength_Checking) for more information.
Title: Re: Lower security restrictions on passwords?
Post by: cactus on December 28, 2008, 09:47:41 AM: Quote from: stodge on December 28, 2008, 01:50:24 AM
Or I could assign some random, highly secure password through the web gui and then drop to the command line to override it with a low security password... Hmmm
Or next time please try searching first as this has been asked and answered multiple time already, is in the FAQ and in the manual(s) as well I guess. Thanks in advance!
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on December 28, 2008, 10:23:51 AM: Quote from: stodge on December 28, 2008, 01:23:51 AM
I just installed 7.4 at home; I used an earlier version for what must be close to 10 years with zero problems. :)

The server is behind a firewall/router so security isn't a primary concern. I'm more bothered with letting my wife and I use simple password we can remember. But the restrictions are quite tight; it enforces passwords with lower/upper case, numbers and other characters. Is there anything I can configure to let us enter simple passwords?

Strangely I was able to set a simple root password.

Thanks

Hi..

first of all, as you've been told, before posting try to search..

anyway, you can also install smeserver-password contrib with:

Code: [Select]
yum --enablerepo=smecontribs install smeserver-password
@cactus & David. should I add reference to the contrib in the faq?
Title: Re: Lower security restrictions on passwords?
Post by: cactus on December 28, 2008, 11:46:59 AM: Quote from: nenonano on December 28, 2008, 10:23:51 AM
@cactus & David. should I add reference to the contrib in the faq?
I see not harm in that, go for it.
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on December 28, 2008, 12:03:28 PM: Quote from: cactus on December 28, 2008, 11:46:59 AM
I see not harm in that, go for it.
Done.. please, check my english :-)

Ciao
Stefano
Title: Re: Lower security restrictions on passwords?
Post by: mercyh on December 29, 2008, 11:08:45 PM: @nenonano, Your English on that entry looks fine to me. :cool:
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on December 29, 2008, 11:27:48 PM: thank you mercyh ;-)
Title: Re: Lower security restrictions on passwords?
Post by: mercyh on December 31, 2008, 03:38:17 PM: nenonano,

Just a suggestion, Why not put a link to the contrib page in the wiki instead of the install code. That way a person could read up on the contrib a bit and decide if they wanted to install.
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on December 31, 2008, 04:34:58 PM: Quote from: mercyh on December 31, 2008, 03:38:17 PM
Why not put a link to the contrib page in the wiki

hi

what page are you talking about? :-)
Title: Re: Lower security restrictions on passwords?
Post by: mercyh on December 31, 2008, 04:51:12 PM: I am sorry Nenonano, I assumed there was a wiki page for the smeserver-password contrib. I cannot find one when I search the wiki. My personal opinion is that in the FAQ or other parts of the WIKI we are better off linking to the CONTRIB wiki page then just giving the install code. This allows the user to do a little more research on what they are installing and also puts them on notice that this is an Add-on package.

In this case there does not seem to be a Wiki page for the contrib so this does not apply. :???: :???: :???:
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on December 31, 2008, 04:56:00 PM: Hi

well, I admit.. I don't know how to create a new page :-)

Ciao
Stefano
Title: Re: Lower security restrictions on passwords?
Post by: mercyh on December 31, 2008, 05:02:56 PM: Did you write the smeserver-password contrib?

I can start a page for you if you would like. I presume it should be linked to the Administration category.
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on December 31, 2008, 05:04:47 PM: yes, I'm the original author of the contrib

If you start a new page, I will find the time to fill it, thank you

Ciao
Stefano
Title: Re: Lower security restrictions on passwords?
Post by: mercyh on December 31, 2008, 05:06:13 PM: will try to do in the next couple days. will post the link to this thread.
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on December 31, 2008, 05:16:10 PM: ok..

about the collocation: in smeserver-manager, "my" contrib is under "security" section.. ;-)

Tia
Ciao & buon anno

Stefano
Title: Re: Lower security restrictions on passwords?
Post by: mercyh on December 31, 2008, 05:28:00 PM: We don't have a "security" section on the contribs wiki. We/you can create it if you like.

Here is the link for your contrib documentation>

http://wiki.contribs.org/Password
Title: Re: Lower security restrictions on passwords?
Post by: mercyh on January 02, 2009, 03:39:36 PM: Nenonano,

I changed your FAQ entry here: http://wiki.contribs.org/SME_Server:Documentation:FAQ#Password_Strength_Checking

(If you don't like the change you are of course welcome to change it back) :cool:
Title: Re: Lower security restrictions on passwords?
Post by: Stefano on January 02, 2009, 03:50:31 PM: Quote from: mercyh on January 02, 2009, 03:39:36 PM
Nenonano,
I changed your FAQ entry here: http://wiki.contribs.org/SME_Server:Documentation:FAQ#Password_Strength_Checking

well done.. ;-)

I've raised a bug (http://bugs.contribs.org/show_bug.cgi?id=4920) because I've realized that english translation of web panel is wrong..

maybe today or tomorrow I will complete the wiki page

ciao
Stefano