Using the Password Validation Provider with the WebLogic Authentication Provider

Configuring Authentication Providers 5-25

5.8.2 Using the Password Validation Provider with the WebLogic Authentication Provider

By default, the WebLogic Authentication provider requires a minimum password length of 8 characters, of which one is non-alphabetic. However, the minimum password length enforced by this provider can be customized. If the WebLogic Authentication provider and Password Validation provider are both configured in the security realm, and you attempt to create a password that does not meet the minimum length enforced by the WebLogic Authentication provider, an error is generated. For example, the following message is displayed in the Administration Console: Error [Security:090285]password must be at least 8 characters long Error Errors must be corrected before proceeding. If the WebLogic Authentication provider rejects a password because it does not meet the minimum length requirement, the Password Validation provider is not called. To ensure that the Password Validator is always used in conjunction with the WebLogic Authentication provider, make sure that the minimum password length is the same for both providers. Using the Administration Console, you can set the minimum password length for WebLogic Authentication provider by completing the following steps: 1. If you have not already done so, in the Change Center of the Administration Console, click Lock Edit.

2. In the left pane, select Security Realms and click the name of the realm you are

configuring for example, myrealm.

3. Select Providers Authentication and click DefaultAuthenticator.

4. Select Configuration Provider Specific and enter the minimum password

length in the field labeled Minimum Password Length.

5. Click Save to save your changes.

6. To activate these changes, in the Change Center, click Activate Changes.

For information about how to set the minimum password length in the Password Validation provider, see Section 5.8.4, Using WLST to Create and Configure the Password Validation Provider.

5.8.3 Using the Password Validation Provider with an LDAP Authentication Provider