password strength check for management users

cfang Sep 25, 2012 11:43 AM

So there is passwd check for app users, like at least x characters long, with mixed letters, numbers, etc.

But I didn't see the same check for management users, when creating them with add-user.sh.

I just created one using all-letter passwd (more than 8 letters), without numbers, or symbols.

Is it just me? The above jira has been resolved so have discussion here.

I ran it on latest trunk build, but I remember having the same experience with previous 7.x releases.

1. Re: password strength check for management users

jaikiran Sep 25, 2012 12:08 PM (in response to cfang)

I think it's an oversight. I would expect the same password strength rules for both application and management users.
Actions
2. Re: password strength check for management users

dlofthouse Sep 25, 2012 12:31 PM (in response to jaikiran)

+1 It is probably closely related to the timing the check is performed as well as management users don't have roles currently assigned to them.
1 of 1 people found this helpful
Actions
3. Re: password strength check for management users

cfang Sep 25, 2012 2:30 PM (in response to dlofthouse)

Created this issue to track it: https://issues.jboss.org/browse/AS7-5634

Thanks for the quick response!
Actions