From: Ondřej Kuzník Date: Wed, 24 Feb 2021 13:19:40 +0000 (+0000) Subject: ITS#7259 Clarify password length considerations X-Git-Tag: OPENLDAP_REL_ENG_2_5_2BETA~4^2~11 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3925b8e009e09ddbc9d136756308c3c1134f7d85;p=thirdparty%2Fopenldap.git ITS#7259 Clarify password length considerations --- diff --git a/doc/man/man5/slapo-ppolicy.5 b/doc/man/man5/slapo-ppolicy.5 index 9638e8e5ec..1c8efe1b8c 100644 --- a/doc/man/man5/slapo-ppolicy.5 +++ b/doc/man/man5/slapo-ppolicy.5 @@ -255,7 +255,7 @@ When syntax checking is enabled (see also the .B pwdCheckQuality attribute), this attribute contains the minimum -number of characters that will be accepted in a password. If this +length in bytes that will be accepted in a password. If this attribute is not present, minimum password length is not enforced. If the server is unable to check the length of the password, whether due to a client-side hashed password or some other reason, @@ -267,7 +267,9 @@ without checking it (if .B pwdCheckQuality is zero (0) or one (1)) or refuse it (if .B pwdCheckQuality -is two (2)). +is two (2)). If the number of characters should be enforced with regards +to a particular encoding, the use of an appropriate pwdCheckModule is +required. .LP .RS 4 ( 1.3.6.1.4.1.42.2.27.8.1.6 @@ -283,7 +285,7 @@ When syntax checking is enabled (see also the .B pwdCheckQuality attribute), this attribute contains the maximum -number of characters that will be accepted in a password. If this +length in bytes that will be accepted in a password. If this attribute is not present, maximum password length is not enforced. If the server is unable to check the length of the password, whether due to a client-side hashed password or some other reason, @@ -295,7 +297,9 @@ without checking it (if .B pwdCheckQuality is zero (0) or one (1)) or refuse it (if .B pwdCheckQuality -is two (2)). +is two (2)). If the number of characters should be enforced with regards +to a particular encoding, the use of an appropriate pwdCheckModule is +required. .LP .RS 4 ( 1.3.6.1.4.1.42.2.27.8.1.31