ODSEE Strong Password Plugin Allows Single Character Password
We are using a Oracle Directory Server Enterprise Edition version 11.1.1.7.160719 on Red Hat Linux version 7 as our LDAP user store. A custom password policy is created on the LDAP and we have enabled the Strong Password Plugin.
The custom password policy is created with Quality Check configuration set as 2 so that the Directory Server returns an LDAP_CONSTRAINT_VIOLATION in case it is unable to determine the quality of the password and the minimum password length is set as 6 characters.
pwdCheckQuality: 2
pwdMinLength: 6
The strong password plugin is also enabled with the following configuration
pwd-strong-check-enabled : on
pwd-strong-check-require-charset : lower
pwd-strong-check-require-charset : digit
pwd-strong-check-require-charset : special