nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Is it possible to configure system to constrain passwords?

tdahlgren

I need to establish rules or constraints on passwords. For example, require a minimum number of characters in the password. Also, require at least one numeric character. Etcetera.

Is this possible through any of the standard customization mechanisms for the community edition? If so, how?

Find more posts tagged with

Comments

dhalupa

Yes, it is possible with regular expression constraint

http://wiki.alfresco.com/wiki/Constraints

tdahlgren

Great! I was hoping that would be the case. I haven't dug into the Alfresco internals; rather, am relying primarily on extensions.

o Would the constraints be defined in the custom model or web-client-config-custom.xml? If not, where should they be placed?o Would they be tied to the login through entries in the <config><client></client></config> tags in web-client-config-custom.xml? If so, what are the relevant tags and options? If not, where?P.S. I'm using Alfresco 2.1 with Tomcat on Linux.

dhalupa

Ups, sorry, I did not quite understand what you are trying to acheive..

I think that you can enforce constrains on password creation by changing ChangeMyPasswordDialog, ChangePasswordDialog and CreateUserWizard (perhaps that are more classes on the list) in org.alfresco.web.bean.users package. This is rather high level, if you would like to go lower try looking into classes which implement AuthenticationDAO interface.. Haven't done this myself, so take this advice with caution, but felt I have to answer since I allready gave you wrong information above

andy

Hi

You would have to enforce password constraints in the DAO or authentication service. Constraints in the DD will not work as they will (most likely) apply to the password hash. You will also need to add the constraints in the UI (so as not to throw a nasty error).

Andy

tdahlgren

My apologies for not following through on this months ago. I was advised (locally) to pursue an Active Directory-related solution so have not pursued this matter further.

Thank you both for the information, though!