Friday, February 11, 2005

I just like IT. I tryed to change my password. This is the error I got:

"The entered password violated the common password conventions of DESY.
The server sent the following message:
PasswordConventionException occured: Check Failed for pattern (.*[A-Z].*[a-z].*[0-9].*)|(.*[a-z].*[A-Z].*[0-9].*)|(.*[0-9].*[a-z].*[A-Z].*)|
(.*[0-9].*[A-Z].*[a-z].*)|(.*[A-Z].*[0-9].*[a-z].*)|(.*[a-z].*[0-9].*[A-Z].*)|
(.*[A-Z].*[a-z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)|(.*[a-z].*[A-Z].*
[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)|(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]
\^_\{\}\|~].*[a-z].*[A-Z].*)|(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[A-Z]
.*[a-z].*)|(.*[a-z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[A-Z].*)|(.*[A-Z]
.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[a-z].*)|(.*[0-9].*[a-z].*[!#$%&'\(\)
\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)|(.*[a-z].*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]
\^_\{\}\|~].*)|(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[a-z].*[0-9].*)|
(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*[a-z].*)|(.*[a-z].*[!#$%&'\(\)
\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*)|(.*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]
\^_\{\}\|~].*[a-z].*)|(.*[A-Z].*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)
|(.*[0-9].*[A-Z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)|(.*[!#$%&'\(\)\*+\-
\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*[A-Z].*)|(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}
\|~].*[A-Z].*[0-9].*)|(.*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[A-Z].*)
|(.*[A-Z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*).
Please try again."

OK, now I know everything...

2 comments:

Igthorn said...

Äh, thats not so difficult ;-)

the .* divides the single letters/signs/numbers of your password, the [ ]mark a group (all letters, numbers) and the | divides the whole password patterns.
To order:
(.*[A-Z].*[a-z].*[0-9].*)
(.*[a-z].*[A-Z].*[0-9].*)
(.*[0-9].*[a-z].*[A-Z].*)
(.*[0-9].*[A-Z].*[a-z].*)
(.*[A-Z].*[0-9].*[a-z].*)
(.*[a-z].*[0-9].*[A-Z].*)
(.*[A-Z].*[a-z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)
(.*[a-z].*[A-Z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)
(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[a-z].*[A-Z].*)
(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[A-Z].*[a-z].*)
(.*[a-z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[A-Z].*)
(.*[A-Z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[a-z].*)
(.*[0-9].*[a-z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)
(.*[a-z].*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)
(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[a-z].*[0-9].*)
(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*[a-z].*)
(.*[a-z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*)
(.*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[a-z].*)
(.*[A-Z].*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)
(.*[0-9].*[A-Z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*)
(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*[A-Z].*)
(.*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[A-Z].*[0-9].*)
(.*[0-9].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[A-Z].*)
(.*[A-Z].*[!#$%&'\(\)\*+\-\./;:<=>?@\[\]\^_\{\}\|~].*[0-9].*)

So the first line says: "first letter upper case, then a lower case letter and then a numer" is a bad password.
And so on...

*klugscheiß* (don't know how to translate)
*gg*

Christian Vogel said...

Well, apparently it is difficult, because those are the regexps that define a *valid* password.

DESY recently upgraded their good old (written in tcl/tk, sending change requests pgp-encrypted over the network...) password-changing script with a JAVA monster (20 MBytes of jar files).

And by the way, Klugscheisser is "smart ass" . :-)

And seriously, something is wrong both with the programmer who makes his work spit out such diarrhoea of an error message and with us as we (at least in part) can make sense of it :-).