| | |
| | | <adm:synopsis> |
| | | The |
| | | <adm:user-friendly-name /> |
| | | determines whether a proposed password is acceptable by measuring |
| | | how similar it is to the user's current password. In particular, |
| | | it uses the Levenshtein Distance algorithm to determine the |
| | | minimum number of changes (where a change may be inserting, |
| | | deleting, or replacing a character) to transform one string into |
| | | the other. It can be used to prevent users from making only minor |
| | | changes to their current password when setting a new password. |
| | | Note that for this password validator to be effective, it is |
| | | necessary to have access to the user's current password. |
| | | Therefore, if this password validator is to be enabled, the |
| | | password-change-requires-current-password attribute in the |
| | | password policy configuration must also be set to true. |
| | | is used to determine whether a proposed password is acceptable based |
| | | on whether the number of characters it contains falls within an |
| | | acceptable range of values. |
| | | </adm:synopsis> |
| | | <adm:profile name="ldap"> |
| | | <ldap:object-class> |
| | |
| | | Specifies the minimum difference of new and old password. |
| | | </adm:synopsis> |
| | | <adm:description> |
| | | A value of zero indicates that no difference between passwords is |
| | | A value of zero indicates that there will be no difference is |
| | | acceptable. |
| | | </adm:description> |
| | | <adm:syntax> |
| | | <adm:integer lower-limit="0" upper-limit="2147483647"/> |
| | | <adm:integer lower-limit="0" /> |
| | | </adm:syntax> |
| | | <adm:profile name="ldap"> |
| | | <ldap:attribute> |