Submitted by jasongayson on Thu, 02/07/2013 - 21:17
One word: Broken.
The one in Webmin Users - Password Restrictions tries to use ispell. On a system with aspell (which contains a wrapper for the legacy ispell) it just returns "is a dictionary word!" for any input no matter how random.
In the Usermin password module on the other hand, the Dictionary check does nothing. Just accepts anything, even the password "hello"
Well, this is an awful system anyway. See my other ticket about a PAM system for a better solution than the junk in Webmin today.
Status:
Closed (fixed)
Comments
Submitted by JamieCameron on Fri, 02/08/2013 - 20:21 Comment #1
Yes, the current code was broken .. I will fix this in the next Webmin release (which will apply to all places password validation is done).
Submitted by Issues on Fri, 02/22/2013 - 20:46 Comment #2
Automatically closed -- issue fixed for 2 weeks with no activity.