Module to manage password complexity

Registered by Sylvain LE GAL (GRAP)

hi all,

I need in my enterprise to force users to choose a password hard to discover. All 'auth' / 'security' module are useless if password is just '1234'. So my questions are :
1/ It seems that there is no module to do that. It isn't ?
2/ Is server-env-tools the good place to do a Merge Proposal ?
3/ Do you know some lib in python to compute / define the complexity of a string ?
4/ Are there some people to work / review that kind of module ?

Quick blueprint of the module :
- create parameters to define a complexity level for password ;
- [optional / second step] set different complexity levels to users. (depending of access right) ; (Exemple : portal user : medium complexity ; accounting users : hard complexity)
- when user changes his password, force the user to tip a complex password ;
- [optional / Second step] when a user logs in, force the user to change his password if it is not complex enough ; (planned incompatility : auth_ldap).

Blueprint information

Status:
Not started
Approver:
None
Priority:
Undefined
Drafter:
Sylvain LE GAL (GRAP)
Direction:
Needs approval
Assignee:
None
Definition:
New
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.