Bug ID 440599: Added DB Variable to configure 'difok' variable in password policy

Last Modified: Dec 18, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 15.1.10.5, 15.1.10.6

Fixed In:
16.0.0, 14.1.4.1

Opened: Dec 12, 2013

Severity: 3-Major

Symptoms

The difok variable enforces the number of characters that must differ between a user's old password and new password. Prior to this release, the number of characters that must differ was not configurable, and just stayed at the default value.

Impact

The number of characters that were required to differ between an old and new password were set by default and could not be configured.

Conditions

Attempting to configure a required number of characters a new password must differ from the old.

Workaround

None.

Fix Information

This release adds a db variable that allows for configuration of the difok variable from TMSH using the command: modify /sys db password.difok value <value>

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips