Ah - my bad. Hadn't read the message properly - thought this was regarding
CS user account passwords.

-----Original Message-----
From: Ian Duffy [mailto:i...@ianduffy.ie]
Sent: 06 August 2013 13:03
To: users@cloudstack.apache.org
Subject: Re: Guest VM password reset - Complexity

> Is this something that you might be looking to change?

Me personally no... Somebody on devs@ might have an opinion about it...

> I would have thought that people looking to implement your LDAP work
> will be interested in it from a security point of view so having
> password complexity rules would also be of significant interest,
> especially if there's a similar requirement enforced at the LDAP side

Account passwords and instance passwords are very separate. One would hope
that the instance passwords given via the "reset" function are purely
throw-away/use-once passwords.

On 6 August 2013 12:52, Adrian Lewis <adr...@alsiconsulting.co.uk> wrote:
> Hi Ian,
>
> Is this something that you might be looking to change? I would have
> thought that people looking to implement your LDAP work will be
> interested in it from a security point of view so having password
> complexity rules would also be of significant interest, especially if
> there's a similar requirement enforced at the LDAP side. Something for 4.3
> perhaps?
>
> Adrian
>
> -----Original Message-----
> From: Ian Duffy [mailto:i...@ianduffy.ie]
> Sent: 06 August 2013 12:07
> To: users@cloudstack.apache.org
> Subject: Re: Guest VM password reset - Complexity
>
> Hi Gaspare,
>
> As far as I'm aware there is no way to do this without modifying the
> source.
>
> The generation of password resets are handled by this piece of code:
> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=blob;f=util
> s/src/com/cloud/utils/PasswordGenerator.java;h=022afd0d8bda7eaba84a8b6
> 7c595e676158837d4;hb=HEAD
>
> It is hard coded to generate passwords of length 6.
>
> Hope this helps,
> Ian
>
> On 6 August 2013 11:29, Gaspare A Silvestri <g.silves...@netsons.com>
> wrote:
>> Hello everybody,
>>
>> is therea way to improve the password complexity when generating a
>> password using the reset guest password script?
>>
>> Thanks in advance,
>>
>> Gaspare
>>

Reply via email to