Author Topic: How to enforce strong passwords when creating email accounts in CWP  (Read 82 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
Hello community,

I’m using a server with CentOS Web Panel (CWP) and I would like to know how to enforce strong password policies when creating email accounts (e.g., at least 12 characters, including uppercase, lowercase, numbers, and special characters).

I’ve seen references to a file called `mail_add.php` in older guides, but I can’t find it in my current installation. I’ve checked the directories `/usr/local/cwpsrv/htdocs/admin/` and `/usr/local/cwpsrv/var/services/users/`, but I couldn’t locate the script where password validation is handled during email account creation.

Is there an official or recommended way to implement strong password requirements for email creation in the user or root panel?

Thanks in advance for any guidance.

Offline
***
The process of forcing the creation of stronger passwords can be seen here:
https://docs.redhat.com/en-us/documentation/red_hat_enterprise_linux/7/html-single/security_guide/index#sec-Forcing_Strong_Passwords

However, this reinforcement is done at the operating system level through the Linux kernel PAM module.

At the CWP application level, this choice is not offered to the user when creating/changing the password, and I have never tested whether, if the password is not accepted by the operating system, CWP will recognize it and request the password again. You will only find out by running a test.

Regards,
Netino