topic User password management rules in Alfresco Archive

User password management rules

bryan_siyam — Wed, 16 Apr 2014 15:51:06 GMT

Hey i'm new to Alfresco (ECM and Forum), so bear with me. I would like to know how to :1. Force password reset upon first login for a user X2. Reject a password based on a sequence of characters it contains3. Force password reset for a all users based on a certain frequency4. Reject a password alrea

Re: User password management rules

romschn — Fri, 25 Apr 2014 16:30:19 GMT

This is how it may be done as per my view.
1. Have custom property applied on user through aspect (say firsttimelogin) default value to be false.
   When user first time logs-in check the value of this property and display a popup to change the password.
   This would be a pure customization. A quick hint would be you can modify header.js to show up the popup.
   Also, create user functionality will have to be customized for the new property.
2. Implement validation while accepting the new password on the displayed popup. Client side validation should suffice i think.
3. For forcing password reset based on frequence, you can probably maintain a custom flag and based on that when a user logs in force the user to reset password showing a popup.
4. This would purely a custom development and you can implement logic to handle this. You will have to write a custom webscript to handle this also some db operations will be required to achieve this. Anytime user changes the password, add it to a custom table and maintain all the passwords for a user separately. You can design it the way you require.

Hope this helps.

Re: User password management rules

bryan_siyam — Thu, 08 May 2014 08:57:42 GMT

Thank you Ramesh,

It does help, except for the fact that it requires developments of extra functionalities.
Do you know of any addons / plugins that could achieve this without further development but mere configuration?

Best Regards,
Bryan

Re: User password management rules

mrogers — Thu, 08 May 2014 09:34:00 GMT

Normally you will configure these sorts of settings in your LDAP server. The password management within alfresco is fairly "lightweight" since an enterprise will typically have its own user directory.

Re: User password management rules

romschn — Fri, 09 May 2014 04:17:19 GMT

AFAIK there isn't any addons/plugin available for this. If you want to do it then you probably have to go for customization in order to get this done in alfresco.