SAS70 Compliant Password Validator

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
specialchar_list = ['!','@','#','$','%','^','&','*','(',')','-','_','=','+','{','}','[',']']
def validate_password(field_data, all_data):
                if len(field_data) < 8:
                         raise validators.ValidationError("Passwords must be a least 8 characters long.")
                # is it sas 70 compliant?

                passcount = 0
                if re.search('[A-Z]', field_data):
                        passcount = passcount + 1

                if re.search('[a-z]', field_data):
                        passcount = passcount + 1

                if re.search('[0-9]', field_data):
                        passcount = passcount + 1

                # does it contain special characters?
                for char in field_data:
                        if char in specialchar_list:
                                passcount = passcount + 1
                                break

                if passcount < 3:
                        raise validators.ValidationError("Passwords must contain three of the following four:<br>&nbsp;&nbsp;&nbsp;Uppercase, Lowercase, Number, Special Character.")

Comments

garywilson (on August 2, 2007):

For those interested in this, may I also suggest using CrackLib to make passwords even stronger by not allowing passwords that contain dictionary words, which are used in password cracking programs such as John the Ripper.

#

(Forgotten your password?)

You may use Markdown syntax here, but raw HTML will be removed.