User password management rules

[bryan_siyam]

Hey i'm new to Alfresco (ECM and Forum), so bear with me. I would like to know how to :
1. Force password reset upon first login for a user X
2. Reject a password based on a sequence of characters it contains
3. Force password reset for a all users based on a certain frequency
4. Reject a password already used by the user resetting his/her password
5. Set representation of certain character sets (e.g. letters, digits, special characters, …)

Your assistance, solutions or redirections would be much appreciated.

[romschn]

This is how it may be done as per my view.
1. Have custom property applied on user through aspect (say firsttimelogin) default value to be false.
   When user first time logs-in check the value of this property and display a popup to change the password.
   This would be a pure customization. A quick hint would be you can modify header.js to show up the popup.
   Also, create user functionality will have to be customized for the new property.
2. Implement validation while accepting the new password on the displayed popup. Client side validation should suffice i think.
3. For forcing password reset based on frequence, you can probably maintain a custom flag and based on that when a user logs in force the user to reset password showing a popup.
4. This would purely a custom development and you can implement logic to handle this. You will have to write a custom webscript to handle this also some db operations will be required to achieve this. Anytime user changes the password, add it to a custom table and maintain all the passwords for a user separately. You can design it the way you require.

Hope this helps.

[bryan_siyam]

Thank you Ramesh,

It does help, except for the fact that it requires developments of extra functionalities.
Do you know of any addons / plugins that could achieve this without further development but mere configuration?

Best Regards,
Bryan

[romschn]

AFAIK there isn't any addons/plugin available for this. If you want to do it then you probably have to go for customization in order to get this done in alfresco.

[mrogers]

Normally you will configure these sorts of settings in your LDAP server.   The password management within alfresco is fairly "lightweight" since an enterprise will typically have its own user directory.