Password Complexity Policies
A password complexity policy enforces requirements that make user passwords more resistant to brute-force attacks. You can create a Password Complexity Class and add it to My webMethods Server for use with the system directory service. You cannot use this feature for external directory services.
To install a password complexity class for the system directory service
1. Stop My webMethods Server.
2. Save the Password Complexity class in a JAR file at this location:
Software AG_directory \MWS\lib
3. Create a jar_file_name.bnd file in the Software AG_directory\MWS\lib directory whose file content looks like the following:
# attach as fragment to the caf.server bundle
Fragment-Host: com.webmethods.caf.server
#expand (inline) the contents of the jar containing the classes
#into the bundle.
# TODO: make sure this filename matches the name of your jar file
Include-Resource: @jar_file_name.jar
#import any external java packages that are required
Import-Package: *;resolution:=optional
#export the java packages that should be visible to external consumers
Export-Package: *
-nouses: true
4. To re-apply the custom JAR file to the My webMethods Server profile with the new information, run this command from the command line:
./mws.[bat|sh] -s serverName update-osgi-profile
5. Restart My webMethods Server.
6. To navigate to the correct page, do one of the following:
In
My webMethods:
Navigate > Applications > Administration > My webMethods > Directory Services > List Directory Services.
As system administrator:
Administration > User Management > Directory Services Administration > List Directory Services.
7. Click the system directory service.
8. In the Password Complexity Class field, type the name of the Password Complexity Class created in the Composite Application Framework and click Apply.
If you need to update your custom JAR file, do the following:
1. Stop My webMethods Server.
2. Update or copy the new custom JAR file to the Software AG_directory \MWS\lib directory.
3. Run this command from the command line:
./mws.[bat|sh] -s serverName update-osgi-profile
4. Restart My webMethods Server.
