Re: [xwiki-users] Configuration to enforce specific password policy in xwiki?

Hi, Mohit, have you checked this...? http://jira.xwiki.org/browse/XWIKI-5469 Greetings! ________________________________________ From: users-bounces(a)xwiki.org [users-bounces(a)xwiki.org] On Behalf Of mohit gupta [motgupta(a)gmail.com] Sent: 15 February 2012 11:43 To: XWiki Users Subject: [xwiki-users] Configuration to enforce specific password policy in xwiki? Hi, I want to apply a specicific set of rules to password policy in xwiki so that that if any new user/existing user(in case he want to change the existing password) adhere to this policy. Some of the rules are like :- 1)Password should have following charectics A minimum password length of fourteen (12) characters Contain at least one alpha characters (a-z, A-Z). Contain at least one Upper Case Alpha character (A-Z). Contain at least one numeric character (0-9). Contain at least one “special” character, such as the following:~ ` ! @ # $ % ’ The maximum number of failed login attempts shall be set to 3. 2)Passwords are required to be changed every 30 days 3)A password history of last 13 passwords must be maintained so that new password is not among last 13 passwords 4)Where any user account has been locked out, admin should be subject to reset the password My first question is about point 1 . I can see one way to modify registration password matching regex at http://wikiURL/myWiki/bin/edit/XWiki/Registration?editor=wiki so that i can change default policy from 6 character to customized policy as per point 1. Is there any other way to from user interface ? Second point is i don't see any configuration setting to fulfil the requirements 2,3 and 4. Does xwiki support this kind of configuration too? _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users Nota: A información contida nesta mensaxe e os seus posibles documentos adxuntos é privada e confidencial e está dirixida únicamente ó seu destinatario/a. Se vostede non é o/a destinatario/a orixinal desta mensaxe, por favor elimínea. A distribución ou copia desta mensaxe non está autorizada. Nota: La información contenida en este mensaje y sus posibles documentos adjuntos es privada y confidencial y está dirigida únicamente a su destinatario/a. Si usted no es el/la destinatario/a original de este mensaje, por favor elimínelo. La distribución o copia de este mensaje no está autorizada. See more languages: http://www.sergas.es/aviso_confidencialidad.htm