[GeoNetwork-devel] Question about password policy enhancements

Hi Developers,

I missed the chance to raise this with everyone last week at Bolsena, but I was wondering how likely it is that this particular issue (around improving password security) would be resolved in 3.4.3:
https://github.com/geonetwork/core-geonetwork/issues/2446

Or, with the new plans for when features are added, is it more likely to be included in 3.6?

Thanks

Jo

···

Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For urgent responses at that time, please visit support.astuntechnology.com or phone our office on 01372 744009

Hi Jo

This was implemented in a custom project, instead of requesting the properties of the password like described in the issue

Add in the settings the configuration for the password enforcement with some selections like: min length, require upper/lower case, require special characters (maybe configurable the list).

, was implemented using a regular expression, but works in a similar way. I’ll check to upgrade the code to master and make a PR for this work.

Regards,
Jose García

···

On Mon, Jun 11, 2018 at 11:01 AM, Jo Cook <jocook@anonymised.com> wrote:

Hi Developers,

I missed the chance to raise this with everyone last week at Bolsena, but I was wondering how likely it is that this particular issue (around improving password security) would be resolved in 3.4.3:
https://github.com/geonetwork/core-geonetwork/issues/2446

Or, with the new plans for when features are added, is it more likely to be included in 3.6?

Thanks

Jo

Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For urgent responses at that time, please visit support.astuntechnology.com or phone our office on 01372 744009


Astun Technology Ltd, The Coach House, 17 West Street, Epsom, Surrey, KT18 7RL, UK
t:+44 1372 744 009 w: astuntechnology.com twitter:@astuntech

iShare - enterprise geographic intelligence platform
GeoServer, PostGIS and QGIS training
Helpdesk and customer portal

Company registration no. 5410695. Registered in England and Wales. Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no. 864201149.


Check out the vibrant tech community on one of the world’s most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


GeoNetwork-devel mailing list
GeoNetwork-devel@…537…sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

Vriendelijke groeten / Kind regards,

Jose García


Veenderweg 13
6721 WD Bennekom
The Netherlands
T: +31 (0)318 416664

Please consider the environment before printing this email.

Hi Jose,

That’s good to hear. Can you confirm whether it is likely to go into 3.4.x in that case, or 3.6?

Thanks

Jo

···

On Mon, Jun 11, 2018 at 11:24 AM, Jose Garcia <jose.garcia@anonymised.com> wrote:

Hi Jo

This was implemented in a custom project, instead of requesting the properties of the password like described in the issue

Add in the settings the configuration for the password enforcement with some selections like: min length, require upper/lower case, require special characters (maybe configurable the list).

, was implemented using a regular expression, but works in a similar way. I’ll check to upgrade the code to master and make a PR for this work.

Regards,
Jose García

On Mon, Jun 11, 2018 at 11:01 AM, Jo Cook <jocook@anonymised.com> wrote:

Hi Developers,

I missed the chance to raise this with everyone last week at Bolsena, but I was wondering how likely it is that this particular issue (around improving password security) would be resolved in 3.4.3:
https://github.com/geonetwork/core-geonetwork/issues/2446

Or, with the new plans for when features are added, is it more likely to be included in 3.6?

Thanks

Jo

Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For urgent responses at that time, please visit support.astuntechnology.com or phone our office on 01372 744009


Astun Technology Ltd, The Coach House, 17 West Street, Epsom, Surrey, KT18 7RL, UK
t:+44 1372 744 009 w: astuntechnology.com twitter:@astuntech

iShare - enterprise geographic intelligence platform
GeoServer, PostGIS and QGIS training
Helpdesk and customer portal

Company registration no. 5410695. Registered in England and Wales. Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no. 864201149.


Check out the vibrant tech community on one of the world’s most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


GeoNetwork-devel mailing list
GeoNetwork-devel@anonymised.comorge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

Vriendelijke groeten / Kind regards,

Jose García


Veenderweg 13
6721 WD Bennekom
The Netherlands
T: +31 (0)318 416664

Please consider the environment before printing this email.

Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For urgent responses at that time, please visit support.astuntechnology.com or phone our office on 01372 744009

Hi Jo

As it’s a new feature, from last week discussions I guess should go to 3.6, but I can provide you a backport to 3.4.

Regards,
Jose García

···

On Mon, Jun 11, 2018 at 1:01 PM, Jo Cook <jocook@anonymised.com> wrote:

Hi Jose,

That’s good to hear. Can you confirm whether it is likely to go into 3.4.x in that case, or 3.6?

Thanks

Jo


Astun Technology Ltd, The Coach House, 17 West Street, Epsom, Surrey, KT18 7RL, UK
t:+44 1372 744 009 w: astuntechnology.com twitter:@astuntech

iShare - enterprise geographic intelligence platform
GeoServer, PostGIS and QGIS training
Helpdesk and customer portal

Company registration no. 5410695. Registered in England and Wales. Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no. 864201149.

On Mon, Jun 11, 2018 at 11:24 AM, Jose Garcia <jose.garcia@anonymised.com> wrote:

Hi Jo

This was implemented in a custom project, instead of requesting the properties of the password like described in the issue

Add in the settings the configuration for the password enforcement with some selections like: min length, require upper/lower case, require special characters (maybe configurable the list).

, was implemented using a regular expression, but works in a similar way. I’ll check to upgrade the code to master and make a PR for this work.

Regards,
Jose García

Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For urgent responses at that time, please visit support.astuntechnology.com or phone our office on 01372 744009

On Mon, Jun 11, 2018 at 11:01 AM, Jo Cook <jocook@anonymised.com> wrote:

Hi Developers,

I missed the chance to raise this with everyone last week at Bolsena, but I was wondering how likely it is that this particular issue (around improving password security) would be resolved in 3.4.3:
https://github.com/geonetwork/core-geonetwork/issues/2446

Or, with the new plans for when features are added, is it more likely to be included in 3.6?

Thanks

Jo

Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For urgent responses at that time, please visit support.astuntechnology.com or phone our office on 01372 744009


Astun Technology Ltd, The Coach House, 17 West Street, Epsom, Surrey, KT18 7RL, UK
t:+44 1372 744 009 w: astuntechnology.com twitter:@astuntech

iShare - enterprise geographic intelligence platform
GeoServer, PostGIS and QGIS training
Helpdesk and customer portal

Company registration no. 5410695. Registered in England and Wales. Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no. 864201149.


Check out the vibrant tech community on one of the world’s most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


GeoNetwork-devel mailing list
GeoNetwork-devel@anonymised.comorge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

Vriendelijke groeten / Kind regards,

Jose García


Veenderweg 13
6721 WD Bennekom
The Netherlands
T: +31 (0)318 416664

Please consider the environment before printing this email.

Vriendelijke groeten / Kind regards,

Jose García


Veenderweg 13
6721 WD Bennekom
The Netherlands
T: +31 (0)318 416664

Please consider the environment before printing this email.