search

wheelybird / ldap-user-manager

A PHP web-based interface for LDAP user account management and self-service password change.
MIT License
479 stars 105 forks source link

Better password generation #183

Open yunylz opened 1 year ago

yunylz commented 1 year ago

Instead of random quirky passwords like "I-love-farts-69" there should be a way to generate secure passwords like kLrj1cefXtoBz0d9Ee2

wheelybird commented 1 year ago

I don't think I've ever come across a quirky password like that. The password generator is designed to create secure yet memorable passwords. I don't see the benefit of generating a collection of random characters.

zer0ish commented 1 year ago

Just started using this to try it over LLDAP and noticed this too. Would be useful to have the random sequence to force the users to change their password to something they will remember, since there isn't an option to force password change at first login option.

wheelybird commented 1 year ago

@zer0ish I'm not sure what you're asking for. Do you want the ability to generate a random string of characters or the ability to force users to change their password at login? Forcing a password change really depends on whether the client application supports that and not every client will. Also I think you need the password policy module enabled in LDAP for that in the first place.

zer0ish commented 1 year ago

In another post someone asked for ability to set Force password reset at first login. I think you said it wasn't possible.

I'm asking for when you click the generate random password, it's so complex, it forces the user to click the link in the email to change their password to something they will better know. Something like the OP said "kLrj1cefXtoBz0d9Ee2". Something like this would make me change passwords to something I could remember.

Not a huge deal to me if not done.