A password validator is a PEP for the password policy

A password validator is a component of the directory server password policy that is used to determine whether a proposed password is acceptable for use. A typical LDAP Servers provides an extensible API for developing custom password validators, but they do come with a number of different types of password validators, including:

  • A validator that can be used to reject a password if the value exists in any of the attributes contained in the user's entry.
  • A validator that can be used to reject a password if the value does not contain characters from an acceptable range of character sets.
  • A validator that can be used to reject a password if it is a word that can be found in a dictionary.
  • A validator that can be used to reject a password if it is too long or too short.
  • A validator that can be used to reject a password if it contains a string of too many repeated characters.
  • A validator that can be used to reject a password if it is too similar to the user's current password.
  • A validator that can be used to reject a password if it does not contain enough unique characters.

Add new attachment

Only authorized users are allowed to upload new attachments.
« This page (revision-4) was last changed on 16-Dec-2012 10:40 by jim