VMS Password Policy - checking to ensure at least 1 alpha and 1 numeric is used

[Bob_306]

John Gillings - your attached macro works for if a user tries using an all numeric password , but fails if an all alpha password is used. can you take a look at your code again.

[Bob_306]

DEV> set pass
Old password:
New password: (used 12345678)
Verification:
%SYSTEM-F-NONUMERIC, Password policy requires at least one numeric
%SYSTEM-F-PWDWEAK, password is too easy to guess; please choose another string
DEV> set pass
Old password:
New password: (used abcdefghi)
Verification:

[John Gillings]

Bob,

I'm not sure which code you're looking at. Please post a reference (or just the code itself).

[Antoniov.]

Bob,
welcome to vms forum.

I can't get your real intention; please add some other information.
You can get help from any fellow of this forum, not only by John.

Antonio Vigliotti

[Willem Grooters]

I wasn't aware that VMS's password policies are customizable?

If so, both replies are wrong.

New password: (used 12345678)
Verification:
%SYSTEM-F-NONUMERIC, Password policy requires at least one numeric

Looks pretty ridiculous reply to me in thois spot, it would have been right in the second attempt ("abcdefgh"). Here, it should say "requires at least one letter" here.
In both cases, I could argue for "requires at least one of _, $ or ." or whatever non-letter and non-digit character si allowed.

Just a thought ;-)

Willem

[Hein van den Heuvel]

I think this is in reference to:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=866372

Indeed, the 'find numeric' loop appears to fall thru into 'num_ok' on end off password:

untiln: SOBGTR R7,nloop ; step to next character
num_ok:

You can fix that by inserting the line:
"brw untila" after the num loop count down, before the num_ok label.
That branch will then take it to the end of the alpha loop, with r7 still set to fail.

Many alternatives possible.

Of course this question sounds to me like someone on a black diamond ski slope asking for directions to the beginners class meeting point.... :-)

hth,

Hein.

[John Gillings]

Bob,

Fair enough... serve me right for not testing it properly. On the other hand it was really only meant to be an example. I would have hoped anyone who wanted to use it would understand the code well enough to fix or modify it!

The attachment uses a simpler algorithm. This version steps through the password and counts characters according to type - numeric, alphabetic and "other". The test requires that the numeric and alphabetic counters be greater than zero, but this version makes it easier to change the policy (for example, at least 2 alphabetic).

[Bob_306]

Thanks John, I thought it was just an example but only wanted to point out my test results. I have made the cheanges you recommended and cusomized it appropiately to fit my need. Thanks again.