Wildfly password rules?

[bresnicow]

I would like to know what rules Wildfly applies as to password complexity when creating management users.  I recall seeing that the password policies are configurable in Wildfly.  Who knows what the default rules are and how to configure them, and where it is documented?  I'm referring to such rules as password length, number of upper/lower case characters etc.

Thanks!

Bill R

[jaikiran]

Take a look at the WFLY_HOME/bin/add-user.properties file and also the https://github.com/wildfly/wildfly-core/blob/master/domain-management/src/main/java/org/jboss/as/domain/management/security/password/simple/SimplePasswordStrengthChecker.java

[bresnicow]

Thanks for your response.  I do not see the file add-user.properties anywhere, can you tell me where I can find that?

[jaikiran]

Bill R wrote:

I do not see the file add-user.properties anywhere, can you tell me where I can find that?

Which exact version of WildFly are you using? It should be present in the bin folder of your WildFly installation as noted in the previous reply.

[bresnicow]

Oh, we are using JBoss AS-7.1 .  So we don't have the password rules yet.  We want to know what rules it supports for when we upgrade to Wildfly 8.x.   Isnt the add-user.properties file somewhere in the source tree?

Thanks

[jaikiran]

Bill R wrote:

Isnt the add-user.properties file somewhere in the source tree?

Here it is, from the 8.2.0.Final (the latest released 8.x version at the moment) tag wildfly/add-user.properties at 8.2.0.Final · wildfly/wildfly · GitHub