Minor fix for OPENDJ-295: Dictionary password validator should verify that ...

Matthew Swift

14.14.2012 e7ae3d3b49be20cda05b029eb34e3e9527fdaab2

Minor fix for OPENDJ-295: Dictionary password validator should verify that a password doesn't contain words, rather than match words.

Change the check-substrings property to optional in order to provide backwards compatibility with OpenDJ 2.4.x.

 opends/resource/schema/02-config.ldif

@@ -4271,9 +4271,9 @@
  STRUCTURAL
  MUST ( ds-cfg-dictionary-file $
         ds-cfg-case-sensitive-validation $
         ds-cfg-test-reversed-password $
         ds-cfg-check-substrings )
  MAY ds-cfg-min-substring-length
         ds-cfg-test-reversed-password )
  MAY  ( ds-cfg-check-substrings $
         ds-cfg-min-substring-length )
  X-ORIGIN 'OpenDS Directory Server' )
objectClasses: ( 1.3.6.1.4.1.26027.1.2.95
  NAME 'ds-cfg-attribute-value-password-validator'

 opends/src/admin/defn/org/opends/server/admin/std/DictionaryPasswordValidatorConfiguration.xml

@@ -24,7 +24,8 @@
  !
  !
  !      Copyright 2007-2008 Sun Microsystems, Inc.
  |      Portions Copyright 2011 profiq, s.r.o.
  !      Portions Copyright 2011 profiq, s.r.o.
  !      Portions copyright 2012 ForgeRock AS.
  ! -->
<adm:managed-object name="dictionary-password-validator"
  plural-name="dictionary-password-validators"
@@ -146,7 +147,7 @@
      </ldap:attribute>
    </adm:profile>
  </adm:property>
  <adm:property name="check-substrings" mandatory="true">
  <adm:property name="check-substrings" mandatory="false">
    <adm:synopsis>
      Indicates whether this password validator is to match portions of
      the password string against dictionary words.