apache / apache/cloudstack

VM Password reset - Unable to set Password Complexity requirement for Special Characters

Open
#6,861 26 comments 0 reactions 0 assignees View on GitHub
no-issue-activity status:stale type:new-feature
Dominant language
Java
Stars
3.1k
Forks
1.4k
Avg merge
6d 19h
Merged PRs (30d)
32

Description

##### ISSUE TYPE

* Bug Report

##### COMPONENT NAME

~~~
UI
~~~

##### CLOUDSTACK VERSION

~~~
4.17.0
~~~

##### CONFIGURATION

N/A

##### OS / ENVIRONMENT

##### SUMMARY

Unable to Set Password Complexity requirement to include special characters

##### STEPS TO REPRODUCE

Our organization wants to enforce password requirements upon password resets on the VM. The default password requirement is 6 characters. I have updated that to 14 characters using vm.password.length

However, there is no provision to enforce inclusion of select special characters (like !@#%^&*()-) -- exclude the $

Is there some way to achieve this?

~~~

~~~

##### EXPECTED RESULTS

~~~
Our organization wants to enforce password requirements upon password resets on the VM. The default password requirement is 6 characters. I have updated that to 14 characters using vm.password.length

However, there is no provision to enforce inclusion of select special characters (like !@#%^&*()-) -- exclude the $

Is there some way to achieve this?
~~~

##### ACTUAL RESULTS

~~~
Password reset only includes numbers, upper and lower case

~~~

Contributor guide

Open the contributing guide

Research direction

Start in the CloudStack VM password-reset UI and trace how the vm.password.length setting is applied. Check how password requirements are currently validated, then determine how selecting allowed special characters while excluding $ should be represented. Done means password resets enforce the requested special-character requirement consistently.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.