1#
2# JBoss, Home of Professional Open Source.
3# Copyright 2010, Red Hat, Inc., and individual contributors
4# as indicated by the @author tags. See the copyright.txt file in the
5# distribution for a full listing of individual contributors.
6#
7# This is free software; you can redistribute it and/or modify it
8# under the terms of the GNU Lesser General Public License as
9# published by the Free Software Foundation; either version 2.1 of
10# the License, or (at your option) any later version.
11#
12# This software is distributed in the hope that it will be useful,
13# but WITHOUT ANY WARRANTY; without even the implied warranty of
14# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15# Lesser General Public License for more details.
16#
17# You should have received a copy of the GNU Lesser General Public
18# License along with this software; if not, write to the Free
19# Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
20# 02110-1301 USA, or see the FSF site: http://www.fsf.org.
21#
22
23#
24# Password restriction
25#
26
27# Valid values: RELAX, WARN or REJECT
28# RELAX : Don't perform any strength checks on the password in both interactive and non-interactive mode
29# WARN : Display a message about the strength of the password. Ask confirmation if the password is weak in interactive mode
30# REJECT : Display a message about the strength of the password (if the password is weak, the user is not created).
31# Ask confirmation if the password is weak in interactive mode
32password.restriction=WARN
33
34# Password minimum length
35password.restriction.minLength=8
36
37# Password must contains at least one alpha
38password.restriction.minAlpha=1
39
40# Password must contains at least one digit
41password.restriction.minDigit=1
42
43# Password must contains at least one symbol
44password.restriction.minSymbol=1
45
46# Password must not match the username. Valid values: TRUE or FALSE.
47password.restriction.mustNotMatchUsername=TRUE
48
49# Comma separated list of forbidden passwords (easily guessable)
50password.restriction.forbiddenValue=root,admin,administrator
51
52# Password strength. Valid values: VERY_WEAK, WEAK, MODERATE, MEDIUM, STRONG, VERY_STRONG or EXCEPTIONAL.
53# If not present, it defaults to "MODERATE"
54password.restriction.strength=MEDIUM
55
56# Class of password strength checker.
57# If not present, utility will revert to default implementation
58password.restriction.checker=org.jboss.as.domain.management.security.password.simple.SimplePasswordStrengthChecker