Is it possible to configure system to constrain passwords?

[tdahlgren]

I need to establish rules or constraints on passwords.  For example,  require a minimum number of characters in the password.  Also, require at least one numeric character.  Etcetera. 

Is this possible through any of the standard customization mechanisms for the community edition?  If so, how?

[dhalupa]

Yes, it is possible with regular expression constraint

http://wiki.alfresco.com/wiki/Constraints

[tdahlgren]

Great!  I was hoping that would be the case.  I haven't dug into the Alfresco internals; rather, am relying primarily on extensions.

o  Would the constraints be defined in the custom model or web-client-config-custom.xml?  If not, where should they be placed?
o  Would they be tied to the login through entries in the <config><client></client></config> tags in web-client-config-custom.xml?  If so, what are the relevant tags and options?  If not, where?

P.S.   I'm using Alfresco 2.1 with Tomcat on Linux.

[dhalupa]

Ups, sorry, I did not quite understand what you are trying to acheive..

I think that you can enforce constrains on password creation by changing ChangeMyPasswordDialog, ChangePasswordDialog and CreateUserWizard (perhaps that are more classes on the list) in org.alfresco.web.bean.users package. This is rather high level, if you would like to go lower try looking into classes which implement AuthenticationDAO interface.. Haven't done this myself, so take this advice with caution, but felt I have to answer since I allready gave you wrong information above

[andy]

Hi

You would have to enforce password constraints in the DAO or authentication service. Constraints in the DD will not work as they will (most likely) apply to the password hash. You will also need to add the constraints in the UI (so as not to throw a nasty error).

Andy

[tdahlgren]

My apologies for not following through on this months ago.  I was advised (locally) to pursue an Active Directory-related solution so have not pursued this matter further. 

Thank you both for the information, though!