Univention Bugzilla – Bug 55393
Do not ignore the password policy by default, only when generating passwords
Last modified: 2023-05-26 10:56:21 CEST
+++ This bug was initially created as a clone of Bug #55392 +++ As a developer using the UCS@school lib __in Kelvin__ I can expect UCS@school software to honor the set password policies, so that the security of my domain is as expected. -- Context/description --- 1. Adapt the UCS@school library __in Kelvin__ to not ignore password policies anymore when creating users. 2. It may still ignore password policies when generating password for new users, as generating passwords that adhere to the current policy is out of scope. 3. Add an option to the school library `User` object to ignore password policies when creating or modifying users.
As discussed merged [main] f744f42e Bug #55393: add option check password policies when creating or modifying users
* OK: acceptance criteria * OK: code review 5.0 & Kelvin * OK: automatic test 5.0 & Kelvin * OK: manual test (only done in 5.0) * OK: advisory