[jboss-jira] [JBoss JIRA] (AS7-2756) Implement username / password strength checks

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/AS7-2756?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12721517#comment-12721517 ] 

Darran Lofthouse commented on AS7-2756:
---------------------------------------

This Jira issue is resolved and no further discussion will be entered into here, if you feel the current behaviour is confusing feel free to submit a new Jira issue.
                
> Implement username / password strength checks
> ---------------------------------------------
>
>                 Key: AS7-2756
>                 URL: https://issues.jboss.org/browse/AS7-2756
>             Project: Application Server 7
>          Issue Type: Feature Request
>          Components: Domain Management
>            Reporter: Darran Lofthouse
>            Assignee: Bartosz Baranowski
>             Fix For: 7.2.0.Alpha1, Open To Community
>
>         Attachments: 2756.patch
>
>
> The AS 7.1 distribution now contains a utility for adding new users to the property files, this utility contains some very basic checks of the username and password e.g. bad choices of username and disallowing passwords which match the username.
> This Jira is to implement a more advanced check to enforce complexity.
> I believe we should have something along the lines of a util that will take a username and password and will respond ACCEPT, REJECT, or WARN where WARN has a message to display to the user and the user an opportunity to ignore the warning or return to re-entry of the details.
> At some point in the future this could become a management operations so the implementation shouldn't be too constrained to the current command line tool.  
> As a management op we may also want to take into account the user making the request, i.e. a user changing their own password has tighter restrictions than the overall administrator.
> As the add user script is currently stand alone this may be a nice task for someone to undertake who would like to get more familiar with submitting an AS change without needing to get too involved with the internals of the application server at this stage.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira