add-user scripts not checking password strength for management users -------------------------------------------------------------------- Key: WFLY-809 URL: https://issues.jboss.org/browse/WFLY-809 Project: WildFly Issue Type: Bug Components: Security Reporter: Cheng Fang Assignee: Darran Lofthouse Priority: Critical Fix For: 8.0.0.Alpha3 So there is passwd check for app users, like at least x characters long, with mixed letters, numbers, etc. Is the same strength check applied to management user? I would assume management user passwords have more stringent requirement, at least should be the same as app user. But I can create a management user using password that consists of all letters (more than 8 letters).