okasion/ldapdock
2
1
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Marisa 2025-10-07 14:55:03 -04:00
parent 39325d3f03
commit 7ad835a698
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
README.md
View File

@ -624,11 +624,13 @@ This two commands are a little convoluted but what they're doing is, using ldaps
### <ins>_Setup passwords complexity_</ins> ### <ins>_Setup passwords complexity_</ins>
There are different levels of password complexity that comes with the policies module in openLDAP: By default, the minimum password quality policy (pwdPolicyQuality) is: length check of at least 5–6 characters, reject identical characters like aaaaaa or 111111.\
0: No quality checking. Any password is accepted, regardless of complexity. The pwdPolicyQuality can be changed, we will do so later, let's understand how is it enforced for now.\
1: Evaluates the password against its built-in quality checks but does not reject weak passwords. If the password fails (e.g., too short or too simple), it logs a warning but allows the change to proceed. \
2: OpenLDAP strictly enforces password quality, rejecting weak passwords with "Constraint violation" errors and messages like "Password fails quality checking policy". There are different levels of password complexity that comes with the policies module in openLDAP:\
Minimum Password quality checking: length check of at least 5–6 characters, reject identical characters like aaaaaa or 111111 0: No quality checking. Any password is accepted, regardless of complexity. (Default value)\
1: Evaluates the password against its built-in quality checks but does not reject weak passwords. If the password fails (e.g., too short or too simple), it logs a warning but allows the change to proceed.\
2: OpenLDAP strictly enforces password quality, rejecting weak passwords with "Constraint violation" errors and messages like "Password fails quality checking policy".\
Setting up passwords complexity level: Setting up passwords complexity level:
``` ```