[jboss-jira] [JBoss JIRA] (WFLY-809) add-user scripts not checking password strength for management users
Darran Lofthouse (JIRA)
jira-events at lists.jboss.org
Mon Jun 3 05:47:54 EDT 2013
[ https://issues.jboss.org/browse/WFLY-809?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12778751#comment-12778751 ]
Darran Lofthouse commented on WFLY-809:
---------------------------------------
This needs to be checked to see if the issue is still present.
> add-user scripts not checking password strength for management users
> --------------------------------------------------------------------
>
> Key: WFLY-809
> URL: https://issues.jboss.org/browse/WFLY-809
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Cheng Fang
> Assignee: Darran Lofthouse
> Fix For: 8.0.0.Alpha2
>
>
> So there is passwd check for app users, like at least x characters long, with mixed letters, numbers, etc.
> Is the same strength check applied to management user? I would assume management user passwords have more stringent requirement, at least should be the same as app user. But I can create a management user using password that consists of all letters (more than 8 letters).
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list