[opencms-dev] Cuestions about Password configuration and resultcache settings

[Christoph Fröhlich]

Hi Ramon,

3) 
add an element <loginmanager> in opencms-system.xml, between <validationhandler> and <sites> 
	.....
    <validationhandler class="org.opencms.security.CmsDefaultValidationHandler"/>
    <loginmanager>
        	<disableMinutes>20</disableMinutes>
			<maxBadAttempts>3</maxBadAttempts>
			<enableSecurity>false</enableSecurity>
    </loginmanager>
    <sites>
	...

I think you can set maxBadAttempts to -1 if you don't want users to be locked temporarily.


2) 
As far as I know it is not configurable but you have to implement a custom password handler. 
To do so, you can subclass "org.opencms.security.CmsDefaultPasswordHandler" and overwrite "validatePassword(String)."
To enable your custom handler,  set the class attribute of element <passwordhandler> in opencms-system.xml


1) 
I can't see an easy solution for this. I would say you have to write a custom LoginManager which subclasses 
org.opencms.db.CmsLoginManager.CmsLoginManager(int, int, boolean).

Since the LoginManager-Implementation is not configurable in org.opencms.configuration.CmsSystemConfiguration you have to provide a custom implementation of CmsSystemConfiguration and enable it in opencms.xml. Your custom system configuration could overwrite getLoginManager() and return your custom loginmanager implementation. Sounds complex. I haven't tried it by myself.

Regards
Christoph


Am 24.01.2013 um 19:54 schrieb Ramon Gavira (POP) <ramon.gavira at sagasoluciones.com>:

> Hello, I have bee looking up information on the net and miss my try. I’ve have some questions about user´s passwords:
>  
> (I am using OpenCms 8.5)
>  
> 1.       Is it possible to configure a password caducity, so user´s has to reset the password?
> 2.       Is it possible to configure password`s minimum length?
> 3.       Is it possible to configure an specific Logon attempts before to lock user account?
>  
> Other than that questions I have another one:
> What is this configuration in opencms-system.xml for?
>  
>                                <resultcache>
>                                                <keygenerator>org.opencms.db.CmsCacheKey</keygenerator>
>                                                <size-users>64</size-users>
>                                                <size-groups>64</size-groups>
>                                                <size-orgunits>64</size-orgunits>
>                                                <size-usergroups>256</size-usergroups>
>                                                <size-projects>32</size-projects>
>                                                <size-projectresources>64</size-projectresources>
>                                                <size-resources>8192</size-resources>
>                                                <size-resourcelists>256</size-resourcelists>
>                                                <size-properties>1024</size-properties>
>                                                <size-propertylists>1024</size-propertylists>
>                                                <size-accesscontrollists>1024</size-accesscontrollists>              
>                                                <size-permissions>1024</size-permissions>
>                                </resultcache>
>  
> Which are good parameter for 2000 users groups of users? Each group will have 3-4 users
> Thank you in advance
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev
> 
> 
> 









-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20130130/020c2ee4/attachment.htm>