System-generated password does not meet Password Security Settings #5283

New issue

Open

opened 2026-02-20 16:32:21 -05:00 by deekerman · 0 comments

deekerman commented

2026-02-20 16:32:21 -05:00

Owner

Originally created by @SinergiaCRM on GitHub (Dec 5, 2024).

Issue

In Password Management, if the Enable System-Generated Passwords Feature option is enabled and a password security configuration is specified, the system-generated passwords do not meet the security requirements.

Possible Fix

The password generation function should take into account the security requirements defined in:

$sugar_config['passwordsetting']['minpwdlength']
$sugar_config['passwordsetting']['oneupper']
$sugar_config['passwordsetting']['onelower']
$sugar_config['passwordsetting']['onenumber']
$sugar_config['passwordsetting']['onespecial']

github.com/salesagility/SuiteCRM@e572230abd/modules/Users/User.php (L2266-L2286)

Steps to Reproduce the Issue

1. Go to _Password Management_
2. Check the _Enable System-Generated Passwords Feature_ option 
3. Change default _Password Security Settings_: minumum length and contain special characters
4. Create a new user 
5. Check tthat the email received by the user with the new password does not meet the defined security requirements.
...

Context

No response

Version

7.14.6

What browser are you currently using?

Chrome

Browser Version

No response

Environment Information

MySQL, PHP 8

Operating System and Version

Ubuntu 20.04

Originally created by @SinergiaCRM on GitHub (Dec 5, 2024). ### Issue In _Password Management_, if the _Enable System-Generated Passwords Feature_ option is enabled and a password security configuration is specified, the system-generated passwords do not meet the security requirements. ### Possible Fix The password generation function should take into account the security requirements defined in: ```php $sugar_config['passwordsetting']['minpwdlength'] $sugar_config['passwordsetting']['oneupper'] $sugar_config['passwordsetting']['onelower'] $sugar_config['passwordsetting']['onenumber'] $sugar_config['passwordsetting']['onespecial'] ``` https://github.com/salesagility/SuiteCRM/blob/e572230abd0dad205b24a96acce72590b20bf69d/modules/Users/User.php#L2266-L2286 ### Steps to Reproduce the Issue ```bash 1. Go to _Password Management_ 2. Check the _Enable System-Generated Passwords Feature_ option 3. Change default _Password Security Settings_: minumum length and contain special characters 4. Create a new user 5. Check tthat the email received by the user with the new password does not meet the defined security requirements. ... ``` ### Context _No response_ ### Version 7.14.6 ### What browser are you currently using? Chrome ### Browser Version _No response_ ### Environment Information MySQL, PHP 8 ### Operating System and Version Ubuntu 20.04