org.apache.directory.server.core.api.authn.ppolicy

Class DefaultPasswordValidator

java.lang.Object

org.apache.directory.server.core.api.authn.ppolicy.DefaultPasswordValidator

All Implemented Interfaces:

PasswordValidator

public class DefaultPasswordValidator
extends java.lang.Object
implements PasswordValidator

The default password validator.

Field Summary

Fields

Modifier and Type	Field and Description
static DefaultPasswordValidator	INSTANCE the default validator's instance

Constructor Summary

Constructors

Constructor and Description
DefaultPasswordValidator() Creates a new instance of DefaultPasswordValidator.

Method Summary

Modifier and Type	Method and Description
private void	checkUsernameSubstring(java.lang.String password, org.apache.directory.api.ldap.model.entry.Entry entry) The password does not contain three letter (or more) tokens from the user's account name.
void	validate(java.lang.String password, org.apache.directory.api.ldap.model.entry.Entry entry) checks if the given password meets the required quality constraints.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

INSTANCE

public static final DefaultPasswordValidator INSTANCE

the default validator's instance

Constructor Detail

DefaultPasswordValidator

public DefaultPasswordValidator()

Creates a new instance of DefaultPasswordValidator.

Method Detail

validate

public void validate(java.lang.String password,
                     org.apache.directory.api.ldap.model.entry.Entry entry)
              throws PasswordPolicyException

checks if the given password meets the required quality constraints.

Note: the length based validations are already done before calling this method
so the implementor should concentrate on the content checking.

Specified by:

validate in interface PasswordValidator

Parameters:

password - the password value

entry - user entry

Throws:

PasswordPolicyException - if the password doesn't meet the quality contraints

checkUsernameSubstring

private void checkUsernameSubstring(java.lang.String password,
                                    org.apache.directory.api.ldap.model.entry.Entry entry)
                             throws PasswordPolicyException

The password does not contain three letter (or more) tokens from the user's account name. If the account name is less than three characters long, this check is not performed because the rate at which passwords would be rejected is too high. For each token that is three or more characters long, that token is searched for in the password; if it is present, the password change is rejected. For example, the name "First M. Last" would be split into three tokens: "First", "M", and "Last". Because the second token is only one character long, it would be ignored. Therefore, this user could not have a password that included either "first" or "last" as a substring anywhere in the password. All of these checks are case-insensitive.

Throws:

PasswordPolicyException