NMAS in eDir 8.8.7 has a bug fix for the MS password complexity.

I am not sure if this included the sAMAccount name as a substring of the
password test, and the tokenized displayName values. (actually, reading
the bug, yes it does).

But regardless, does User App's password change page honour these new
settings. (Might be they just added Unicode support so it is now 3/5
really not 3/4).


Does it try to explain them to the user as it does the normal complexity

Also, does the web UI apply the policy before submitting the password,
or does it just try to set the password and if NMAS rejects it, then
report it?