Hi All,
I have reported bugs in launchpad about those bugs:
https://bugs.launchpad.net/nova/+bug/1461431https://bugs.launchpad.net/nova/+bug/1461433
Please have a look if you are interested.
I also agree that Keystone should at least provide the option of basic password 
checks, and if the users are not satisfied with the provided solution, then 
they can choose more advanced products.

BR,
Zheng

> Date: Wed, 3 Jun 2015 21:02:19 +0800
> From: [email protected]
> To: [email protected]
> Subject: Re: [openstack-dev] [nova][security] Enable user password    
> complexity verification
> 
> On Wed, Jun 3, 2015 at 7:49 PM, David Stanek <[email protected]> wrote:
> >
> > On Wed, Jun 3, 2015 at 6:04 AM liusheng <[email protected]> wrote:
> >>
> >> Thanks for this topic, also, I think it is similar situation when talking
> >> about keystone users, not only the instances's password.
> >>
> >
> > In the past we've talked about having more advanced password management
> > features in Keystone (complexity checks, rotation, etc). The end result is
> > that we are not adding them because we would like to get away from managing
> > users in Keystone that way. Instead we are pushing for users to integrate
> > Keystone with more fully featured identity products.
> >
> 
> Hi, David,
> 
> Thanks for the info you provided. Would you please give me some
> links(emails or etherpad) about the discussion before?
> 
> IMHO, as an identity management project, with user-faced APIs, Keytone
> should provide such security feature options to users, to make it
> self-contained, we could not always rely on other compoment or
> product(Horizon, 3rd party component, etc.) to do something really
> import for Keystoen itself.
> 
> -- 
> Regards!
> -----------------------------------
> Lingxian Kong
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: [email protected]?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
                                          
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: [email protected]?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to