-
Bug
-
Resolution: Fixed
-
Low
-
2.6
-
None
Crowd offers a feature to restrict the password complexity. As part of this there is the "Password Complexity Requirement Message", which is meant to prompt the user when a password is entered which fails the requirements.
This message is never being shown when the password fails requirements. I've reproduced this in the following ways:
- Creating a new user using the administration interface, where the password fails requirements. The error message given is:
The supplied password is not valid for the directory server.
- Modifying a user using the administration interface, setting a password that fails the requirements. The error message given is:
Your new password does not meet the directory complexity requirements
Steps to Reproduce
- Add a password complexity regular expression, and message for a directory
- Try to create a user with a deliberately failing password
- Try to modify an existing user with a deliberately failing password
- is a regression of
-
CWD-2835 Provide a per-directory configuration option to explain configured password complexity requirements
- Closed
- is related to
-
CONFSERVER-29209 When a password regex is used in a Crowd Directory, no feedback is given when attempting to create/change a password in Confluence.
-
- Gathering Impact
-
- mentioned in
-
Wiki Page Failed to load
The message is correctly displayed when the user tries to change his password through Crowd's user console or Crowd's reset password email message.
However, when the admin tries to change a user's password, the custom message is not displayed.