Re: minimum password length/character combination supp ort?
<[email protected]> Wed, 29 Oct 2014 18:08:18 +0000
| Newsgroups | gmane.mail.vpopmail |
|---|---|
| Message-ID | <[email protected]> |
--_68E6F64D-9E43-4F50-B9F3-72FCF8019239_ Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8" Tom, Thanks for the reply. Of course, sorry for the naïve query. Yes we use qmailadmin to allow password changes by end users. And we’ve just found a writeup here: http://mugurel.sumanariu.ro/qmail/qmailadmin-check-if-password-is-strong-enough/ but it seems a little dodgy. There isn’t by any chance a build time variable for qmail admin or something a little more within the source tree than the above patch method? Thanks again for your reply. Sincerely, Peter Brezny Purplecat Networks Inc. www.purplecat.net 828-250-9446 From: Tom Collins Sent: Wednesday, October 29, 2014 1:56 PM To: [email protected] The vchkpw program verifies the password. Are you wondering about the vpasswd program for changing a password? That's an admin program, and wouldn't typically enforce a password change policy. How do your users currently change their passwords? QmailAdmin? Some other program? You would have to incorporate password requirements into that program, and not the one that validates a password. -Tom On Oct 29, 2014, at 7:42 AM, Peter Brezny wrote: > Dear [email protected], > > Is there a way to enforce a minimum length and character combination > (letters, numbers, upper case) with vchkpw and if not, are there patches or > external applications that integrate well with vchkpw to get this > functionality? !DSPAM:54512e1726514774016155! --_68E6F64D-9E43-4F50-B9F3-72FCF8019239_ Content-Transfer-Encoding: 8bit Content-Type: text/html; charset="utf-8" <html> <head> <meta name="generator" content="Windows Mail 17.5.9600.20605"> <style type="text/css"><!--html { font-family: "Color Emoji", "Calibri", "Segoe UI", "Meiryo", "Microsoft YaHei UI", "Microsoft JhengHei UI", "Malgun Gothic", "sans-serif"; }--></style><style data-externalstyle="true"><!-- p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; margin-bottom:.0001pt; } p.MsoNormal, li.MsoNormal, div.MsoNormal { margin:0in; margin-bottom:.0001pt; } p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst, p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle, p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast { margin-top:0in; margin-right:0in; margin-bottom:0in; margin-left:.5in; margin-bottom:.0001pt; line-height:115%; } --></style></head> <body dir="ltr"> <div data-externalstyle="false" dir="ltr" style="font-family: 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif';font-size:12pt;"><div>Tom,</div><div><br></div><div>Thanks for the reply. Of course, sorry for the naïve query. Yes we use qmailadmin to allow password changes by end users.</div><div><br></div><div>And we’ve just found a writeup here:</div><div><a href="http://mugurel.sumanariu.ro/qmail/qmailadmin-check-if-password-is-strong-enough/" target="_parent">http://mugurel.sumanariu.ro/qmail/qmailadmin-check-if-password-is-strong-enough/</a></div><div>but it seems a little dodgy.</div><div><br></div><div>There isn’t by any chance a build time variable for qmail admin or something a little more within the source tree than the above patch method?</div><div><br></div><div>Thanks again for your reply.</div><div><br></div><div data-signatureblock="true"><div><br></div><div>Sincerely,<br><br>Peter Brezny<br>Purplecat Networks Inc.<br>www.purplecat.net<br>828-250-9446</div><div><br></div></div><div style="padding-top: 5px; border-top-color: rgb(229, 229, 229); border-top-width: 1px; border-top-style: solid;"><div><font face=" 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif'" style='line-height: 15pt; letter-spacing: 0.02em; font-family: "Calibri", "Segoe UI", "Meiryo", "Microsoft YaHei UI", "Microsoft JhengHei UI", "Malgun Gothic", "sans-serif"; font-size: 12pt;'><b>From:</b> <a href="mailto:[email protected]" target="_parent">Tom Colli ns</a><br><b>Sent:</b> Wednesday, October 29, 2014 1:56 PM<br><b>To:</b> <a href="mailto:[email protected]" target="_parent">[email protected]</a></font></div></div><div><br></div><div dir=""><div id="readingPaneBodyContent">The vchkpw program verifies the password. Are you wondering about the vpasswd program for changing a password? That's an admin program, and wouldn't typically enforce a password change policy.<br><br>How do your users currently change their passwords? QmailAdmin? Some other program? You would have to incorporate password requirements into that program, and not the one that validates a password.<br><br>-Tom<br><br><br>On Oct 29, 2014, at 7:42 AM, Peter Brezny wrote:<br>> Dear vchkpw@inter7. com,<br>> <br>> Is there a way to enforce a minimum length and character combination<br>> (letters, numbers, upper case) with vchkpw and if not, are there patches or<br>> external applications that integrate well with vchkpw to get this<br>> functionality?<br><br><br><br><br></div></div></div> !DSPAM:54512e1726514774016155! </body> </html> --_68E6F64D-9E43-4F50-B9F3-72FCF8019239_--