password limitations within confluence.cfg.xml

[Rusty Rusty]

What are the valid characters that can be used for the "hibernate.connection.password" property within confluence.cfg.xml?  

I'm using an external database, authenticating with active directory, and I'd like to change the password for the account but keep getting authentication failures that I think are related to special characters within the password field.

[Rusty Rusty]

Coming back to this with a followup question.

After the password change and restart, everything seems to work fine for a short time.

We use active directory/ldap for user authentication.  Within a few minutes after updating the confluence user password and restarting the instance, those user authentications stop working.  The only login that seems to work is the 'admin' account that is maintained internally (not active directory).

Restoring the confluence password to the old value and restarting the instance corrects the problem.

[Rusty Rusty]

Thanks for the reply, Stephen.

I was able to change the password as you suggested,  with a longer, simplified schema.  Prior to that I had attempted multiple passwords with a variety of special characters.  

At this point I'm satisfied to have the password changed and will revisit this the next time the password need to be changed.

[Stephen Sifers]

Glad to hear you're able to change the password and get up and running!

Regards,
Stephen Sifers

[Stephen Sifers]

Hello Rusty,

You should not have a limitation within the hibernate.connection.password option itself when setting a password. As a test, we would suggest setting a simple A-Z password to see if this does not have an issue.

Another note, while a password complexity may be required, password entropy can help to achieve complex passwords while staying within simplified passwords. An example of a high entropy password could be; house-Gocart-ocean-Aerospace. These types of passwords may assist with having a complex password while keeping them within simplified characters.

We look forward to your results from testing with a simple character password to see if the issue is still present.

Regards,
Stephen Sifers