There are actually 2 things:

It's painful to add the user/passwords when you don't know the rules.

• You type in "mypass" and get an error "JBAS015269: Password must have at least '8' characters!"
• You then type in 'mypasswd' and get an error "JBAS015266: Password must have at least one digit."
• You then type in 'mypasswd1' and get an error "JBAS015267: Password must have at least one non-alphanumeric symbol."
• You then type in 'mypasswd1@' and succeed.

Is it possible to show all the rules (sort of a usage display) when you first encounter an error?

Also, shouldn't the admin be able to configure the password rules? For example, what if a shop wants lenient passwords?

Will this break upgrades from AS 7.1 --> AS 7.2 or EAP 6.0 --> EAP 6.1?