[Building Sakai] Forcing the user to change password

[Steve Swinsburg]

Hi Miguel,

Is this code available?

Cheers
Steve

Sent from my iPhone

On 06/03/2012, at 19:49, Miguel Carro Pellicer <farreri.sakai at gmail.com> wrote:

> We developed that functionality, every       month/week/day/year the user must change their password and the password must satisfy some rules like 3 characters and 5 numbers.
> 
> The configuration is something like this:
> 
> #Require a password reset after a XX amount of days. Values of -1 and lower or an invalid value will turn this feature off. 0 will result in having to reset a password every time a user logs in.
> password.reset.after.days=90
> 
> #The following settings should be used if you want to use some requirements for the new passwords.
> #The minimum lenght of the password, should be equal or greater       than the min.lenght, min.letters.uppercase and min.letters.lowercase together. Leave empty to not use this value, however system will automatically set the minimum length if one or more of the properties below is set.
> password.requirements.min.length=8
> 
> #The minimum amount of uppercase letters a password should contain. Leave empty if you do not wish to use this setting.
> password.requirements.min.letters.uppercase=
> 
> #The minimum amount of lowercase letters a password should contain. Leave empty if you do not wish to use this setting.
> password.requirements.min.letters.lowercase=3
> 
> #The minimum amount of numbers (0-9) a password should contain. Leave empty if you do not wish to use this setting.
> password.requirements.min.numbers=3
> 
> Regards, Miguel.
> 
> El 06/03/2012 9:33, Steve Swinsburg escribió:
>> 
>> Hi
>> 
>> As far as I am aware I'm not sure this functionality exists, except in the reset password tool. You can tell them all to go there to reset their password. 
>> 
>> You could also customise Sakai to do an additional check if they still have the default password and redirect them automatically. 
>> 
>> Cheers
>> Steve
>> 
>> Sent from my iPhone
>> 
>> On 06/03/2012, at 5:57, Lucas Lo Vercio <lucaslovercio at gmail.com> wrote:
>> 
>>> Hi!
>>> 
>>> How redirect new users (who were created by an admin with a default password) in his first login to the change password form?
>>> I think that I've to save their IDs in an auxiliar table when they are created (and erase them in the first log in), but I don't know how or the tools and methods related to redirect to the change password form or the home page.
>>> This functionality has been developed? Or could you tell me the tool and files do I have to edit? I read in the thread that I have to use the DeveloperHelperService and edit two files (LoginTool.java and UserAction.java), but it's not enough helpful to me.
>>> 
>>> Thanks!
>>> 
>>> -- 
>>> Lucas D. Lo Vercio
>>> sites.google.com/site/lucaslovercio/
>>> 
>>> _______________________________________________
>>> sakai-dev mailing list
>>> sakai-dev at collab.sakaiproject.org
>>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>>> 
>>> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"
>> 
>> 
>> _______________________________________________
>> sakai-dev mailing list
>> sakai-dev at collab.sakaiproject.org
>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>> 
>> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"
> 
> -- 
> <image002.jpg>
>  
> Miguel Carro Pellicer
> Technical Manager - Director técnico
> miguel.carro at samoo.es
> +34 - 673 80 32 69
> www.samoo.es
>  
> Este  correo  y  sus archivos asociados son privados y confidenciales y va dirigido  exclusivamente  a su destinatario. Si recibe este correo sin ser el  destinatario del mismo, le rogamos proceda a su eliminación y lo ponga en  conocimiento del emisor. La difusión por cualquier medio del contenido de  este  correo podría ser sancionada conforme a lo previsto en las leyes españolas, Ley Orgánica 15/1999 de Protección de Datos de Carácter Personal.  No  se autoriza la utilización con fines comerciales o para su incorporación a ficheros automatizados de las direcciones del emisor o del destinatario.”
>  
> This mail and its attached files are confidential and are only and exclusively intended to their addressee. In case you may receive this mail not being its addressee, we beg you to let us know the error by reply and to proceed to destroy it. The circulation by any mean of this mail could be penalised in accordance with the Spanish legislation. Is not allowed the use of both, the transmitter and the addressee’s, address with a commercial aim, or in order to be incorporated to automated data process or to any kind of files.
>  
> P Antes de imprimir este correo electrónico piense bien si es necesario hacerlo. El medioambiente es cosa de todos.
>  
>  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20120306/e8b6b9cf/attachment.html