mirror of
https://github.com/modoboa/modoboa.git
synced 2026-04-25 00:46:03 +03:00
[GH-ISSUE #1985] Feature Request: Customizable Password Policy #1487
Labels
No labels
bug
bug
dependencies
design
documentation
duplicate
enhancement
enhancement
enhancement
feedback-needed
help-needed
help-needed
installer
invalid
looking-for-sponsors
modoboa-contacts
new-ui
new-ui
pr
pull-request
pyconfr
python
question
security
stale
webmail
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/modoboa-modoboa#1487
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @neonknight on GitHub (Jun 25, 2020).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/1985
Currently passwords must be at least 8 characters, with one uppercase and one number. This is not very flexible.
Please provide a simple UI control to set minimum length and choose required character classes (uppercase, lowercase, numbers, special characters).
Ideally this can be set globally and overridden per domain.
@tonioo commented on GitHub (Sep 4, 2020):
@neonknight You can already customize this in the settings.py file. (this feature is provided by Django natively)
Do we really need a per domain level?
@neonknight commented on GitHub (Sep 16, 2020):
Changing settings.py for sure works for me, thanks for the pointer. Will the file be overwritten by modoboa updates?
That would just be the cherry on top of the cake :-) I think a GUI based configuration is necessary, but per domain settings is quite a bonus.
@tonioo commented on GitHub (Oct 21, 2020):
If you use the installer, then yes.
This feature is provided by Django and depends on the settings.py. I think a GUI for that would be possible but the per-domain level would required a custom password validation system. I don't think it's a priority.