nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Password strength?

natguyton

I am currently evaluating Community Edition 3.2 and need to find out how to enforce a certain level of password strength when a user changes their password. Ie, how to enforce a minimum length, certain number of special characters, alphanumerics, etc. I haven't found mention of this in the wikis or forum searches. If we are to roll out Alfresco, we need it to pass certain security audit sweeps.

Many thanks for your help!

Find more posts tagged with

Comments

norgan

Hi,
there is no config-setting for this. Either get the source code and insert your own checking routine, or integrate alfresco to an LDAP you have and make the password management elsewhere.

That would also help reducing the security audit load since you have one system only to maintain the password management with in your whole corp.

Norgan

natguyton

Thanks, Norgan.

natguyton

I found that I can indeed enforce (well, that's relative, this may be in client-side javascript rather than server-side validation) minimum length on passwords this way:

Changing minPasswordLength: "3" to something like 7 in the following files:

tomcat/webapps/share/components/console/users.js
tomcat/webapps/share/components/console/users-min.js
tomcat/webapps/share/components/profile/changepassword-min.js
tomcat/webapps/share/components/profile/changepassword.js

and also changing password-min-length from 3 to 7 in the following:

tomcat/webapps/share/WEB-INF/classes/alfresco/web-framework-config-application.xml
tomcat/webapps/alfresco/WEB-INF/classes/alfresco/web-client-config.xml