Skip to content

Commit

Permalink
Switch back to VeryFascistCheck
Browse files Browse the repository at this point in the history
Originally I checked passwords with VeryFascistCheck, which adds
some basic checks in Python to FascistCheck. Let's switch back,
at least until we switch to a pure Python implementation.

Currently we use the default wordlist, see `man update-cracklib`,
which is generated from /usr/share/dict/* in cron.daily.
Later we should probably use a real corpus of known passwords.
  • Loading branch information
daradib committed Aug 25, 2016
1 parent f14475f commit f9a6d79
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion ocflib/account/validators.py
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ def validate_password(username, password, strength_check=True):
raise ValueError('Password is too similar to username')

try:
cracklib.FascistCheck(password)
cracklib.VeryFascistCheck(password)
except ValueError as e:
raise ValueError('Password problem: {}'.format(e))

Expand Down

0 comments on commit f9a6d79

Please sign in to comment.