{"id":33196,"date":"2019-06-10T15:00:22","date_gmt":"2019-06-10T21:00:22","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=33196"},"modified":"2024-08-14T17:42:49","modified_gmt":"2024-08-14T21:42:49","slug":"ldap-password-complexity","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity","title":{"rendered":"Set Password Complexity for LDAP"},"content":{"rendered":"\n

Do you need to set password complexity for LDAP resources? Chances are, your organization is concerned with the <\/span>threat of identity breach<\/span><\/a>, so upping user password complexity requirements makes a great deal of sense. Although it\u2019s certainly possible to configure password complexity settings with LDAP, it\u2019s not as straightforward as one might think.<\/span><\/p>\n\n\n\n

Password Complexity in LDAP Implementations<\/span><\/h2>\n\n\n\n

Historically, the two most popular implementations of LDAP have been OpenLDAP\u2122, the open-source hub for LDAP, and Microsoft<\/span>\u00ae<\/sup><\/span> Active Directory<\/span>\u00ae<\/sup><\/span>, the Windows<\/span>\u00ae<\/sup><\/span>-centric commercial directory service. When it comes to setting password complexity between the two, the approach is varied. <\/span><\/p>\n\n\n\n

OpenLDAP<\/span><\/h3>\n\n\n\n

For OpenLDAP, password complexity is set at the user account level. As you can imagine, as an open source protocol and open source server implementation, there are a wide range of configurable password complexity options. IT admins can generally use commands in OpenLDAP to adjust how complex their organization\u2019s passwords are. The most popular repository of commands was the draft-behera-ldap-password-policy<\/code> until it became defunct upon its expiry in 2010.<\/span><\/p>\n\n\n\n

Although OpenLDAP is capable of high configurability, with greater flexibility often comes greater configuration and management. This is true of the notoriously technical OpenLDAP in general, and their password complexity features are no different.<\/span><\/p>\n\n\n\n

Active Directory<\/span><\/h3>\n\n\n\n

Active Directory (AD)<\/span><\/a> is not technically a dedicated LDAP instance like OpenLDAP, but the directory service itself can leverage the protocol, allowing users to authenticate to LDAP resources using their AD identities. Password complexity in AD is usually managed in one of two ways.<\/span><\/p>\n\n\n\n

The first method is via the Windows Default Password Policy. This inherent feature in Windows offerings uses fairly industry-standard conventions for password complexity. The two core requirements are that the password cannot match the username and the password must include three different character types, including upper and lower case letters, numbers, special characters, etc. This policy is applied to users through a <\/span>Group Policy Object (GPO)<\/span><\/a>.<\/span><\/p>\n\n\n\n

The second method is through a Fine Grained Password Policy (FGPP). An FGPP is a configurable requirement that is acted directly on the user or object. As such, admins can adjust the password complexity on a more granular level as their organization demands. This feature has been available since Windows Server 2008, and has since been updated in newer versions.<\/span><\/p>\n\n\n\n

The Rub<\/span><\/h2>\n\n\n\n

While both OpenLDAP and Active Directory feature configurable password requirements, many IT admins are still feeling unsatisfied. After all, both solutions are designed to be used on-prem (on top of the fact that both solutions are difficult to implement without the proper technical know-how).<\/span><\/p>\n\n\n\n

With a majority of organizations looking to <\/span>move their IT infrastructure to the cloud<\/span><\/a>, the idea of using on-prem identity management solutions is somewhat unappealing. In an ideal world, IT admins could leverage a tool that allows them to set password complexity for LDAP, as well as their other IT resources, from the cloud.<\/span><\/p>\n\n\n\n

Enter: LDAP-as-a-Service<\/span><\/h2>\n\n\n\n

Thankfully, there is a next-generation directory services solution that can do just that. Using a globally-hosted network of OpenLDAP servers, this <\/span>LDAP-as-a-Service<\/span><\/a> gives admins the functionality of OpenLDAP with none of the hassle of actually setting up and managing it. This cloud directory featuring LDAP-as-a-Service uses a browser-based admin console, which features <\/span>easily configured password complexity settings<\/span><\/a>.<\/span><\/p>\n\n\n\n

The next-gen cloud directory service doesn\u2019t stop at LDAP-as-a-Service, however. It is a full-fledged directory service, capable of managing users and their access to systems, email, networks, applications, and more from a single pane of glass. This includes <\/span>GPO-like Policies<\/span><\/a> for cross-platform system and user management, single sign-on (SSO) through <\/span>SAML<\/span><\/a>, network authentication via <\/span>RADIUS<\/span><\/a>, and more.<\/span><\/p>\n\n\n\n

That means, by setting password complexity for LDAP, you\u2019re setting it for almost all resources your end users leverage; a user in this cloud directory service only needs one secure identity for everything. In essence, it is a complete reimagination of AD and LDAP, available worry-free from the cloud.<\/span><\/p>\n\n\n\n

Try LDAP-as-a-Service Free<\/span><\/h2>\n\n\n\n

This cloud directory service is called <\/span>探花大神<\/span>\u00ae<\/sup><\/span> Directory-as-a-Service<\/span>\u00ae<\/sup><\/span><\/a>. Using 探花大神, IT organizations can join the over 75,000 fellow organizations that have shifted their identity management to the cloud.<\/span><\/p>\n\n\n\n

You can use Directory-as-a-Service completely free for the first ten users in your organization. Just <\/span>sign up for 探花大神<\/span><\/a> today; it\u2019s risk free, requires no credit card, and guarantees you ten users for free in the platform, forever.<\/span><\/p>\n\n\n\n

If you would like to learn more about using 探花大神 to set password complexity for all of your IT resources, or just about the product as a whole, please <\/span>contact us<\/span><\/a>. We\u2019d be happy to help start you on your 探花大神 journey.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Do you need to set password complexity for LDAP? After all, password complexity requirements can help you better control your IT security.<\/p>\n","protected":false},"author":70,"featured_media":33197,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[],"collection":[2779],"platform":[],"funnel_stage":[3016],"coauthors":[2515],"acf":[],"yoast_head":"\nSet Password Complexity for LDAP - 探花大神<\/title>\n<meta name=\"description\" content=\"Do you need to set password complexity for LDAP? After all, password complexity requirements can help you better control your IT security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Set Password Complexity for LDAP\" \/>\n<meta property=\"og:description\" content=\"Do you need to set password complexity for LDAP? After all, password complexity requirements can help you better control your IT security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity\" \/>\n<meta property=\"og:site_name\" content=\"探花大神\" \/>\n<meta property=\"article:published_time\" content=\"2019-06-10T21:00:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-14T21:42:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"520\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Zach DeMeyer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zach DeMeyer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity\"},\"author\":{\"name\":\"Zach DeMeyer\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\"},\"headline\":\"Set Password Complexity for LDAP\",\"datePublished\":\"2019-06-10T21:00:22+00:00\",\"dateModified\":\"2024-08-14T21:42:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity\"},\"wordCount\":758,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg\",\"articleSection\":[\"Best Practices\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity\",\"url\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity\",\"name\":\"Set Password Complexity for LDAP - 探花大神\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg\",\"datePublished\":\"2019-06-10T21:00:22+00:00\",\"dateModified\":\"2024-08-14T21:42:49+00:00\",\"description\":\"Do you need to set password complexity for LDAP? After all, password complexity requirements can help you better control your IT security.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg\",\"width\":780,\"height\":520,\"caption\":\"Set Password Complexity for LDAP\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Set Password Complexity for LDAP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"探花大神\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"探花大神\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"探花大神\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d\",\"name\":\"Zach DeMeyer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g\",\"caption\":\"Zach DeMeyer\"},\"description\":\"Zach is a Product Marketing Specialist at 探花大神 with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.\",\"sameAs\":[\"http:\/\/www.jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Set Password Complexity for LDAP - 探花大神","description":"Do you need to set password complexity for LDAP? After all, password complexity requirements can help you better control your IT security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity","og_locale":"en_US","og_type":"article","og_title":"Set Password Complexity for LDAP","og_description":"Do you need to set password complexity for LDAP? After all, password complexity requirements can help you better control your IT security.","og_url":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity","og_site_name":"探花大神","article_published_time":"2019-06-10T21:00:22+00:00","article_modified_time":"2024-08-14T21:42:49+00:00","og_image":[{"width":780,"height":520,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg","type":"image\/jpeg"}],"author":"Zach DeMeyer","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Zach DeMeyer","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity"},"author":{"name":"Zach DeMeyer","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d"},"headline":"Set Password Complexity for LDAP","datePublished":"2019-06-10T21:00:22+00:00","dateModified":"2024-08-14T21:42:49+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity"},"wordCount":758,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg","articleSection":["Best Practices"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity","url":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity","name":"Set Password Complexity for LDAP - 探花大神","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg","datePublished":"2019-06-10T21:00:22+00:00","dateModified":"2024-08-14T21:42:49+00:00","description":"Do you need to set password complexity for LDAP? After all, password complexity requirements can help you better control your IT security.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/ldap-password-complexity"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/06\/ldap-password-complexity.jpg","width":780,"height":520,"caption":"Set Password Complexity for LDAP"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/ldap-password-complexity#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Set Password Complexity for LDAP"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"探花大神","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"探花大神","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"探花大神"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/5b2c563fb7404910e9be96e7d4e7828d","name":"Zach DeMeyer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d1d6602d927eb5a16b1dfd4ba6b4c219","url":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2145e4e676784129043e5eec7c4e41e6?s=96&d=mm&r=g","caption":"Zach DeMeyer"},"description":"Zach is a Product Marketing Specialist at 探花大神 with a degree in Mechanical Engineering from the Colorado School of Mines. He loves being on the cutting edge of new technology, and when he's not working, he enjoys all things outdoors, music, and soccer.","sameAs":["http:\/\/www.jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/33196"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/70"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=33196"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/33196\/revisions"}],"predecessor-version":[{"id":113983,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/33196\/revisions\/113983"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/33197"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=33196"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=33196"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=33196"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=33196"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=33196"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=33196"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=33196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}