Password policy

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

spawn

In Alfresco 5.2, the user can change passwords. So far it is ok. But is there any way to force a password complexity? How min. 2 lowercase letters, 2 uppercase letters, 2 digits and a special character. I know there is a way in global-config.xml to force a min password length but no other stuff in that way. (i think )

And finally:

I'd like to give the user a hint in case of the password policy does not met.

calvo

Unfortunatelly, I think it requires developments of extra functionalities.
Anyway, I'm not sure if there are addons/plugins that could achieve this option.

As you have said is possible to stablish the minimum length of user's passwords on "<web-extension>/share-config-custom.xml" file:

<config evaluator="string-compare" condition="Users">
   <users>
      <!-- minimum length for username and password -->
      <username-min-length>2</username-min-length>
      <password-min-length>3</password-min-length>
   </users>
</config>

I'll try any test using RegEx (regular expressions).

Another topic that deals with a related theme:

User password management rules