This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Insecure Password / Common Criteria

I've seen that since update 6.201 i cannot add users with "standard" passwords... instead the
Passwords must
be at least eight characters long
contain one or more lowercase characters
contain one or more uppercase characters
contain one or more numerical digits
contain one or more non-alphanumeric characters

which is a bit annoying. Does anyone know if it's possible to switch off these password criterias?

"Common Criteria" Certification is off and I can't find a switch which has anything to do with blocking insecure passwords or anything.

Any help would be appreciated

Best regards

Marcus

This thread was automatically locked due to age.

Parents

0 drees over 19 years ago

No idea, but it would have been nice if Astaro mentioned this change in their change logs for 6.200.
Cancel
Vote Up 0 Vote Down

Cancel
0 MSchenk over 19 years ago in reply to drees

Hello,
Here's my update:
Yesterday I phoned our Astaro support in Germany and they told me that there was an update in 6.201 that sets these password restrictions, and that it is impossible to turn off.

But as one of you guys had the "feature" in a an earlier version yet, it could also have to do with me playing with that "common criteria" feature under "certification". I have it now turned off again but maybe it turned something hidden on which doesnt disable by itself? And now noone knows how to turn that off again.

Greetings
Marcus
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MSchenk over 19 years ago in reply to drees

Hello,
Here's my update:
Yesterday I phoned our Astaro support in Germany and they told me that there was an update in 6.201 that sets these password restrictions, and that it is impossible to turn off.

But as one of you guys had the "feature" in a an earlier version yet, it could also have to do with me playing with that "common criteria" feature under "certification". I have it now turned off again but maybe it turned something hidden on which doesnt disable by itself? And now noone knows how to turn that off again.

Greetings
Marcus
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 VelvetFog over 19 years ago in reply to MSchenk

Think of it this way:

Astaro is likely doing you a favor by enforcing a prudent level of password complexity on you and your users. Left to your own devices, you would probably be using far less secure passwords.

And Astaro is not the only one doing this. Microsoft Windows 2003 server with Active Directory will also by default enforce password complexity and minimum password lengths.

None of this bothers me. I have been using 8 to 10 character passwords that meet current complexity requirements for more than ten years. Perhaps you need to get into the groove of doing the same.
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to MSchenk

Hi MSchenk

look at this post:
http://www.astaro.org/showflat.php?Cat=&Number=63677&page=3&view=collapsed&sb=5&o=&fpart=1#63677

You'll find the reason.
Cancel
Vote Up 0 Vote Down

Cancel