validate password options

validate password options reports errors or inconsistencies in the password complexity option values set, including length and expiration. The result is reported in a tabular format, with each row representing a validation step, the result of the step, and the validation test performed. The result is one of Pass, Fail, or Not Applicable (NA). If any validation test fails, the return status is set to 1. For information on setting password complexity options, see the 15.0.2 New Features Guide.

sp_passwordpolicy ['validate password options']

minimum password length:		       8
min alpha in password:         2
min digits in password:        2
min upper char in password:    2
min lower char in password:     2

To validate these options, enter:

sp_passwordpolicy 'validate password options'

Validation Step           Pass/Fail/NA    Validation Test 
---------------     ------------     -------------------------------------min alpha in password         Fail      'min alpha in password' > = 'min                                          upper char in password + 'min                                         lower char in password'

minimum password length - 1   Pass      'minimum password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min alpha in                                         password'

minimum password length - 2    Pass     'minimum password length' > = 'min                                          digits in password' + min special                                          char in password' + 'min upper                                          char in password' + 'min lower                                         char in password'

maximum password length - 1    Pass      'max password length' > = 'min                                          digits in password' + 'min                                          special char in password' + 'min                                         alpha in password'

maximum password length – 2    Pass      'max password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min upper                                          char in password' + 'min lower                                         char in password'
password exp warn interval      NA      'password exp warn interval' < =                                        'systemwide password expiration' 

(6 rows affected) 
(return status = 1) 

There is one failure: the sum of min upper char in password + min lower char in password is greater than the value of min alpha in password, so the validation step min alpha in password fails.

minimum password length:        8
min digits in password:         2
min special char in password:   2
min alpha in password:          6
min upper char in password:     3
min lower char in password: 3

sp_passwordpolicy 'validate password options'

Validation Step        Pass/Fail/NA      Validation Test 
---------------     -------               -------------------------------- 
min alpha in password        Pass        'min alpha in password' > = 'min upper                                    char in password' + 'min lower                                         char in password'

minimum password length-1    Fail         'minimum password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min alpha in                                         password'

minimum password length-2    Fail        'minimum password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min upper                                          char in password' + 'min lower                                         char in password'

maximum password length-1    Pass        'max password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min alpha in                                         password' 

maximum password length–2    Pass        'max password length' > = 'min                                          digits in password' + 'min                                          special char in password' + 'min                                          upper char in password' + 'min                                         lower char in password'

password exp warn interval    NA         'password exp warn interval' < =                                         systemwide password expiration' 

(6 rows affected) 
(return status = 1) 

There are two failures in step 2 and step 3.The sum of min digits in password, min special char in password and min alpha in password is greater than the value of minimum password length, so the validation step minimum password length -1 fails. The sum of min digits in password, min special char in password, min upper char in password and min lower char in password is greater than the value of minimum password length, so the validation step minimum password length -2 fails.

minimum password length:      8
min digits in password:       11
min special char in password: 11
min alpha in password:        11
min upper char in password:   1
min lower char in password:    1

sp_passwordpolicy 'validate password options' 

Validation Step         Pass/Fail/NA     Validation Test 
---------------          ------------     -------------------------------- 
min alpha in password      Pass           'min alpha in password' > = 'min                                           upper char in password' + 'min                                          lower char in password'

minimum password length-1  Fail           'minimum password length' > = 'min                                           digits in password' + 'min                                           special char in password' + 'min                                          alpha in password'

minimum password length-2   Fail         'minimum password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min upper                                          char in password' + 'min lower                                         char in password'

maximum password length-1   Fail         'max password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min alpha in                                         password'

maximum password length–2   Pass         'max password length' > = 'min                                          digits in password' + 'min special                                          char in password' + 'min upper                                          char in password' + 'min lower                                         char in password'

password exp warn interval    NA         'password exp warn interval' < =                                          'systemwide password expiration' 

(6 rows affected) 
(return status = 1) 

There are 3 failures, including a serious one, a failure in a test for maximum password length, where the sum of the required password components is greater than the maximum password allowed.

minimum password length:       8
min digits in password:        2
min special char in password:  1
min alpha in password:         4
min upper char in password:    0
min lower char in password:     0

sp_passwordpolicy 'validate password options' 

Validation Step        Pass/Fail/NA         Validation Test 
---------------         ------------        ------------------------------min alpha in password      Pass             'min alpha in password' > = 'min                                             upper char in password' + 'min                                            lower char in password'

minimum password length-1  Pass             'minimum password length' > =                                             'min digits in password' + 'min                                             special char in password' +                                            'min alpha in password'

minimum password length-2  Pass             'minimum password length' > =                                             'min digits in password' + 'min                                             special char in password' +                                             'min upper char in password' +                                            'min lower char in password'

maximum password length-1  Pass             'max password length' > = 'min                                             digits in password' + 'min                                             special char in password' + 'min                                       'min alpha in password'

maximum password length–2  Pass            'max password length' > = 'min                                            digits in password' + 'min                                            special char in password' + 'min                                            upper char in password' + 'min                                           lower char in password'

password exp warn interval   NA            'password exp warn interval' < =                                           'systemwide password expiration' 

(6 rows affected) 
(return status = 0) 

There are no failures with these settings. This reports all 5 rows returned, and a return status of 0.

---

Copyright © 2009. Sybase Inc. All rights reserved.