Unable to see password policy in admin security seetings

ℹ️ Support
1

Nextcloud version (30.0.2)
Operating system and version _(Opensuse leap 15.6 & slowroll)
Apache or nginx version _(eg, Apache 2.4.58-150600.5.26.1.)
PHP version ( 8.2.24)

I have two instances of Nextcloud on two PCs and I am unable to see the Password Policy settings on either PC even though I have installed and enabled the Password Policy add-on.

Screenshot_20241108_153109
Screenshot_20241108_1531091704×985 163 KB

I can see other options. This is the same on both PCs.

Any way to see the policy settings - what is missing?

Thanks for any help

John

1 Like
2

The Password Policy settings are actually provided by a shipped app. Go to Apps → Disabled apps and if it is listed there, just click on Enable.

1 Like
3

Hi,
The app “Password Policy” is enabled on both PCs.

Thanks

4

Please post the output of occ app:list

5

Here is the output as requested.

Enabled:

  • activity: 3.0.0
  • admin_audit: 1.20.0
  • app_api: 4.0.0
  • audioplayer: 3.4.1
  • bruteforcesettings: 3.0.0
  • calendar: 5.0.1
  • circles: 30.0.0
  • cloud_federation_api: 1.13.0
  • comments: 1.20.1
  • contacts: 6.1.0
  • contactsinteraction: 1.11.0
  • dashboard: 7.10.0
  • dav: 1.31.1
  • federatedfilesharing: 1.20.0
  • federation: 1.20.0
  • files: 2.2.0
  • files_antivirus: 5.6.0
  • files_downloadlimit: 3.0.0
  • files_external: 1.22.0
  • files_pdfviewer: 3.0.0
  • files_reminders: 1.3.0
  • files_sharing: 1.22.0
  • files_trashbin: 1.20.1
  • files_versions: 1.23.0
  • firstrunwizard: 3.0.0
  • logreader: 3.0.0
  • lookup_server_connector: 1.18.0
  • mail: 4.0.2
  • maps: 1.4.0
  • memories: 7.4.1
  • nextcloud_announcements: 2.0.0
  • notifications: 3.0.0
  • oauth2: 1.18.1
  • password_policy: 2.0.0
  • photos: 3.0.2
  • privacy: 2.0.0
  • provisioning_api: 1.20.0
  • ransomware_protection: 1.14.0
  • recommendations: 3.0.0
  • related_resources: 1.5.0
  • richdocuments: 8.5.2
  • richdocumentscode: 24.4.902
  • root_cache_cleaner: 0.1.8
  • serverinfo: 2.0.0
  • settings: 1.13.0
  • sharebymail: 1.20.0
  • spreed: 20.0.2
  • support: 2.0.0
  • survey_client: 2.0.0
  • systemtags: 1.20.0
  • text: 4.1.0
  • theming: 2.5.0
  • twofactor_backupcodes: 1.19.0
  • unsplash: 3.0.1
  • updatenotification: 1.20.0
  • user_status: 1.10.0
  • viewer: 3.0.0
  • weather_status: 1.10.0
  • webhook_listeners: 1.1.0-dev
  • workflowengine: 2.12.0
    Disabled:
  • encryption: 2.18.0
  • files_rightclick: 0.15.1 (installed 1.6.0)
  • passwords: 2024.9.20 (installed 2024.9.20)
  • sensorlogger: 0.1.4 (installed 0.1.4)
  • suspicious_login: 8.0.0
  • twofactor_nextcloud_notification: 4.0.0
  • twofactor_totp: 12.0.0-dev
  • user_ldap: 1.21.0
6

Not sure. That’s weird. I can’t reproduce this at all. Have you seen this area in your installations previously? When do you think it disappeared or are these brand-new installations?

  • What happens if disable the Password policy app then re-enable it?
  • Are you using any WAFs like mod_security or Cloudflare?
  • How about a different browser and/or in privacy mode and/or w/o plugins enabled?
  • Can you check your Nextcloud log for errors?
7

Hi,
Some success - the main PC is working correctly if I used a different browser.
The “backup” PC has the same issue even with different browser or using privacy mode.
I don’t know what a WAF is sorry.
I checked the log and the only errors relate to Unsplash service not found. I have disabled the splash for now and will try to clear cache etc .

Thanks for the help.

John

8

I have just installed a new instance of a new Pc and still cannot see the password policy section in security.

I have tried the following to use occ to change the password length but it fails

mercury:/srv/www/htdocs/nextcloud # sudo -u wwwrun ./occ config:app:set password_policy:min_length 8

But this fails, can someone tell me the proper syntax to use?

Thanks

John

9

Looks like the parameter is minLength:

And correct config:app:set syntax is described in the Admin Manual here.

10

Hi Jtr,
Thanks for pointing me in the right direction the actual syntax is:

sudo -u wwwrun ./occ config:app:set password_policy minlength --value=8

thanks

John

1 Like