# Password complexity check for local awx users

**URL:** <https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [June 10, 2020, 2:09am UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135 "2020-06-10T02:09:03Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ron\_McKenzie](https://avatars.discourse-cdn.com/v4/letter/r/7c8e57/32.png) [@Ron\_McKenzie](https://forum.ansible.com/u/Ron_McKenzie)\
**Post date:** [June 10, 2020, 2:09am UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135/1 "2020-06-10T02:09:03Z")

</div>

Looking for some help on the best way to implement this. We basically have to provide a mechanism that when the password is changed or when a new user is created, the password is verified to contain letters, numbers, symbols, upper, lower and be a certain length. I see there used to be something called local\_settings.json which doesnt appear to work and is OBE in current code. We are using 3.0.1 version. I think the understanding is the external authentication would cover this, but we cannot use this unless we have some mechanism that does this for the internal users also. Any suggestions or anyone else already doing something, and would like to provide guidance, it would certainly be much appreciated. Otherwise it seems python and chasing the code is in our near future. Thanks in advance. Ron

---

<div class="post-metadata">

**Author:** ![Ashish\_Kumar\_Padhy](https://avatars.discourse-cdn.com/v4/letter/a/87869e/32.png) [@Ashish\_Kumar\_Padhy](https://forum.ansible.com/u/Ashish_Kumar_Padhy)\
**Post date:** [June 10, 2020, 7:39am UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135/2 "2020-06-10T07:39:07Z")

</div>

Hello,

I need help.

How to restore a node in 3-node awx/Ansible tower ha cluster ?

I have 3-node awx/Ansible tower 10.0 is running and suddenly one of the node in cluster get crashed…now how to restore a new formatted node back to ha cluster…

---

<div class="post-metadata">

**Author:** ![ffirg](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ffirg/32/10029_2.png) [@ffirg](https://forum.ansible.com/u/ffirg)\
**Post date:** [June 10, 2020, 7:47am UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135/3 "2020-06-10T07:47:16Z")

</div>

Hi Ron

Can you not use the password lookup plugin? [https://docs.ansible.com/ansible/latest/plugins/lookup/password.html](https://docs.ansible.com/ansible/latest/plugins/lookup/password.html)

Otherwise you can write a simple play using assert, such as:

- name: Check Users Password Complexity  
assert:  
that:
- users\_password | length \> 7
- users\_password | regex\_search(‘[A-Z]’)
- users\_password | regex\_search(‘[a-z]’)
- users\_password | regex\_search(‘[0-9]’)  
fail\_msg: “users\_password does not need password complexity requirements (8+ Chars, Lower Case, Upper Case, Number)”

Phil.

---

<div class="post-metadata">

**Author:** ![Ron\_McKenzie](https://avatars.discourse-cdn.com/v4/letter/r/7c8e57/32.png) [@Ron\_McKenzie](https://forum.ansible.com/u/Ron_McKenzie)\
**Post date:** [June 10, 2020, 12:35pm UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135/4 "2020-06-10T12:35:08Z")

</div>

Phil,  
Thanks for the quick reply. The passwords we are looking to check/strengthen are the internal awx admin/user passwords. For example, if I log into the awx console, select Users, [+] Create New Users, I have the ability to create the new user account. There is nothing that restricts the password being set. Additionally if I change the password by clicking the upper right username icon while logged int, there is nothing that checks its complexity. Ideally, the admin/admins should have something that restricts the passwords they use. For example, I created an System Auditor account and set the password to f. thanks again. Ron

---

<div class="post-metadata">

**Author:** ![pabbisetty.hm](https://avatars.discourse-cdn.com/v4/letter/p/9d8465/32.png) [@pabbisetty.hm](https://forum.ansible.com/u/pabbisetty.hm)\
**Post date:** [March 29, 2023, 8:58pm UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135/5 "2023-03-29T20:58:59Z")

</div>

Hello, I have same requirement to implement password complexity on local logins. Is it possible to make the password complexity as a UI menu item?

Thank you

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [March 31, 2023, 5:46pm UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135/6 "2023-03-31T17:46:05Z")

</div>

Hi Pabbisetty,

Right now the password complexity is not configurable. Feel free to open an RFE in github AWX issues

AWX Team

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [April 12, 2023, 4:56pm UTC](https://forum.ansible.com/t/password-complexity-check-for-local-awx-users/33135/7 "2023-04-12T16:56:10Z")

</div>

Check out [https://github.com/ansible/awx/pull/13789](https://github.com/ansible/awx/pull/13789)

-The AWX Team
