Bug 6848

Summary: Stronger password management for staff users
Product: Koha Reporter: Savitra Sirohi <savitra.sirohi>
Component: PatronsAssignee: Bugs List <koha-bugs>
Status: RESOLVED MOVED QA Contact: Bugs List <koha-bugs>
Severity: enhancement    
Priority: P5 - low CC: gmcharlt, katrin.fischer, veron
Version: Main   
Hardware: All   
OS: All   
See Also: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21309
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13664
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:

Description Savitra Sirohi 2011-09-05 05:44:12 UTC
1. Don't allow first or last name to be used in the password
2. Force password change using a system pref controlled period
Comment 1 Katrin Fischer 2019-05-04 11:23:53 UTC
(In reply to Savitra Sirohi from comment #0)
> 1. Don't allow first or last name to be used in the password
> 2. Force password change using a system pref controlled period

I think 1) could be covered by using plugins for password strength. Note: We alredy have a system preference for better password complexity now.

Bug 13664 - Add password strength plugin

2) I think is interesting. There is a bug asking for a feature that enforces password reset on first login:

Bug 21309 - Enforce password change on login

This could act as the foundation for a regular password reset.

I think this bug is too broad right now, asking for at least 2 features.
Therefore I am closing this bug as 'moved'.