keystone/releasenotes/notes/bug-1645487-ca22c216ec26cc9b.yaml
Ronald De Rose 0b3e59e041 PCI-DSS Force users to change password upon first use
"PCI-DSS 8.2.6 Set passwords/passphrases for first-time use and
upon reset to a unique value for each user, and change immediately after
the first use" [1].

I'll update the docs in a subsequent patch.

[1] https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.pdf

Closes-Bug: #1645487
Change-Id: I5575dbd6d63d41014a7468acd6bdf0175d791618
2017-01-27 18:47:15 +00:00

9 lines
382 B
YAML

---
features:
- >
[`Bug 1645487 <https://bugs.launchpad.net/keystone/+bug/1645487>`_]
Added a new PCI-DSS feature that will require users to immediately change
their password upon first use for new users and after an administrative
password reset. The new feature can be enabled by setting
[security_compliance] ``change_password_upon_first_use`` to ``True``.