Crowd offers a feature to restrict the password complexity. As part of this there is the "Password Complexity Requirement Message", which is meant to prompt the user when a password is entered which fails the requirements.

This message is never being shown when the password fails requirements. I've reproduced this in the following ways:

1. Creating a new user using the administration interface, where the password fails requirements. The error message given is:

   The supplied password is not valid for the directory server.

2. Modifying a user using the administration interface, setting a password that fails the requirements. The error message given is:

   Your new password does not meet the directory complexity requirements

Steps to Reproduce

1. Add a password complexity regular expression, and message for a directory
2. Try to create a user with a deliberately failing password
3. Try to modify an existing user with a deliberately failing password